last executing test programs: 6m17.110730346s ago: executing program 5 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) 6m16.190847294s ago: executing program 5 (id=525): socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x254, 0x24, 0x100, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xf, 0xffff}, {0x0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xe3, 0x8, 0x0, 0x3, 0xa536, 0x5, 0x6}}, {0x10, 0x2, [0xe6c, 0x1, 0x1, 0xfffe, 0x1, 0x2]}}, {{0x1c, 0x1, {0x73, 0x1, 0x7, 0x7, 0x1, 0x0, 0x7ffffffd, 0x8}}, {0x14, 0x2, [0x400, 0x800, 0x7, 0x4, 0x6, 0x9, 0x3ff, 0xd]}}, {{0x1c, 0x1, {0x6, 0xc, 0x8, 0x2, 0x1, 0x2, 0x10, 0x3}}, {0xa, 0x2, [0xfffa, 0x3ff, 0x1]}}, {{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0xee62, 0x1, 0x7}}, {0x12, 0x2, [0x0, 0x800, 0x90, 0x1e00, 0x9, 0xfff, 0x1]}}]}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x154, 0x2, {{0x7, [0x7, 0x1, 0xf, 0x1, 0x7, 0x4, 0xf, 0x8, 0xb, 0x1, 0xe, 0xfe, 0xf, 0xf, 0x7, 0xb], 0x1, [0xfffe, 0x8001, 0x8001, 0x8, 0x5, 0xc0fd, 0x6, 0x100, 0x5, 0xfff9, 0x4, 0x2, 0x101, 0x1, 0x7, 0x8], [0xfae, 0x8, 0x9, 0x1, 0x6, 0x0, 0xfff, 0x1, 0x0, 0x2, 0x6, 0x80, 0x401, 0x1, 0xd, 0xfab8]}, [@TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x34, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x7}, {0xc}, {0xc, 0x3, 0xffffffffffffff7f}, {0xc, 0x3, 0x5}]}, @TCA_MQPRIO_MAX_RATE64={0x40, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0xe6e3}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x7}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x3}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x1}]}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5c1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004890) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) fsopen(&(0x7f0000000080)='squashfs\x00', 0x0) 6m12.703612748s ago: executing program 5 (id=534): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) socket(0x2, 0x80805, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xffd}], 0x3) 6m12.38002585s ago: executing program 5 (id=536): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8602, 0x128) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060001"], 0x24}, 0x1, 0x0, 0x0, 0x20001001}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f00000003c0)='./mnt\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="e0", 0x1}], 0x1, 0xfffd, 0x3, 0x1f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f00000000c0)="5e2786bbe47cad8407f6d28d8c87bfbb1548b8224641a75ff6d2b71f457b6129765fe3f628e491251299d2f884659a74aa8e7328700446da09dbeaf195686d6e9ff1c6b091f157b5a1437d3da8cece1a16f95d5cfb804a4188746b1c8b06d76d9c4904417f4876f4943feef06f32b1c21b930e41ee6df0b27542e5637bfd5f73f23803495b17bdf2368052f7fd90c1c951288f4414da84a1785691", &(0x7f00000001c0)=""/185, &(0x7f0000000000)="b503c21fbfe23768cc0e6006095866ce104dc1e0257a50", &(0x7f0000000280)="e48a5ca64efaa4fcacc6a80cb709", 0x7, r0}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, &(0x7f0000000040)=0xfffffffffffffe66) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x125500, 0x0) lseek(r5, 0x107, 0x2) getdents64(r5, 0xfffffffffffffffe, 0x29) 6m11.04359838s ago: executing program 5 (id=544): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 6m8.921186167s ago: executing program 5 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) 6m8.48156007s ago: executing program 32 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) 4m31.30665505s ago: executing program 2 (id=829): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x5, 0x4000000, 0x2, [0x0, 0x0, 0x0, 0x0], [0xbc2], [0x805, 0x1001000, 0x0, 0x3], [0x0, 0x1, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r4, 0x0, r4, r5], [0x2b8], [], [0xa]}) 4m30.829781431s ago: executing program 2 (id=833): ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000201bc440560831ac1e93010203010902120085eb6e203262a3e4aeaa916d0100deffff48e1000000d2c87f00"], 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xfffffff7, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000120009000d000000", 0x24) syz_genetlink_get_family_id$mptcp(0x0, r0) munlock(&(0x7f00006cc000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x7811}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_matches\x00') pread64(r5, &(0x7f0000000580)=""/4096, 0x1000, 0xff) epoll_wait(r5, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000100)) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 4m27.626453387s ago: executing program 2 (id=846): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_mmap={0x7, 0xa, 0x4, 0x100000, 0x3, {0x0, 0x2710}, {0x1, 0xc, 0x7, 0x7, 0x80, 0x5, "2852dfcf"}, 0x8, 0x1, {0x0}, 0x5}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$I2C(&(0x7f0000004800), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6e, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@mpls_mc={0x88a8, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x66, 0x0, 0x81, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x5, 0x3, 0x1, 0x1, 0x6, 0x9}, 0x1, {0xab64}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x34, 0x0, 0x0, 0x1, 0x2, 0xe}, 0x2, {0x3, 0x3ff, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) io_uring_setup(0x25b4, &(0x7f0000000580)={0x0, 0x11ae, 0x80, 0x2, 0x3d1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) 4m24.503568501s ago: executing program 2 (id=852): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x764, &(0x7f0000000a80)="$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") chdir(&(0x7f00000001c0)='./file0\x00') clock_getres(0xa, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 4m22.910555017s ago: executing program 2 (id=857): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @qipcrtr={0x2a, 0x2, 0x3fff}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @generic={0x26, "7a719292e3321400e79691bcc726"}, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x6, 0x1000}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m22.037838738s ago: executing program 2 (id=861): r0 = getpid() r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x20000006}) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r4, 0x7, r3, &(0x7f0000000280)={r1, r2}) 4m19.611545362s ago: executing program 33 (id=861): r0 = getpid() r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x20000006}) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r4, 0x7, r3, &(0x7f0000000280)={r1, r2}) 3m28.37158546s ago: executing program 0 (id=993): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) memfd_create(0x0, 0x0) (fail_nth: 1) 3m27.311516341s ago: executing program 0 (id=995): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x2040400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x2) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_pts(r1, 0x121500) read$msr(0xffffffffffffffff, &(0x7f0000019540)=""/102400, 0x19000) 3m26.012615764s ago: executing program 0 (id=1000): creat(0x0, 0xd931d3864d39ddd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0x38d9, 0x1046, 0x0, 0x3b8}) 3m12.291579161s ago: executing program 0 (id=1029): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB='cruft,dmode=0x00000000000006ad,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6a6f6c6965742c756e686964652c686964652c6e6f726f636b2c7362736563746f723d3078303030303030303030303030303030302c6f76657272696465726f636b7065726d2c73686f776173736f632c6d61703d6e6f726d616c2c6d61703d61636f726e2c73657373696f6e3d3078303030303030303030303030303035372c0004471220d6292e3b2466fe879e9ef2df1af65c353b3ec24188dcbb455626f884556e48d1b0470ebea0893b1ba0be1e6304e778d4e644a840b763c3d1234f39fdde31832481ca597595526dc7d7788c2bff6eb2bcaf1e"], 0x4, 0x3f1, &(0x7f0000000700)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x8}, 0x10) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1, 0x15, 0x8) 3m11.138802888s ago: executing program 0 (id=1033): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000003640)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000003bc0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x30, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) signalfd4(r7, &(0x7f0000000180)={[0x984]}, 0x8, 0x80800) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) fallocate(r0, 0x0, 0x6, 0x8800000) 3m9.035640547s ago: executing program 0 (id=1039): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000003640)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000003bc0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x30, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) signalfd4(r7, &(0x7f0000000180)={[0x984]}, 0x8, 0x80800) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) fallocate(r0, 0x0, 0x6, 0x8800000) 3m7.766926305s ago: executing program 34 (id=1039): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000003640)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000003bc0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x30, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) signalfd4(r7, &(0x7f0000000180)={[0x984]}, 0x8, 0x80800) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) fallocate(r0, 0x0, 0x6, 0x8800000) 24.917770693s ago: executing program 6 (id=1450): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@gettaction={0x1c8, 0x32, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5d4a}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x56c7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040000) epoll_create(0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x800}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 23.76174526s ago: executing program 6 (id=1455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xa, &(0x7f00000000c0)) ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1010051, &(0x7f0000000340)={[{@nochanges}, {@version_upgrade={'version_upgrade', 0x3d, 'none'}}, {@noexcl}, {@ratelimit_errors}]}, 0x1, 0xf628, &(0x7f000001ed40)="$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") 20.167629776s ago: executing program 6 (id=1462): sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbfc, {0x1, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4014) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x100, 0x70bd2b, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x20000044) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x10c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2e84c63ec7dadd195cdec3778d5c5ab56c18b3549e17f23"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8c8176fbbbfe8aac487af75f38311880a2cf831421b68d23"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x10c}, 0x1, 0x0, 0x0, 0x4041040}, 0x4000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x81}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) r3 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r3, &(0x7f00000005c0)=""/42, 0x2a, 0x0, 0x0, 0x0) poll(&(0x7f0000000600)=[{r0}, {r0, 0x200}, {r3, 0x4628}, {r0, 0x2}, {r0, 0x100}, {r3}], 0x6, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000800}, 0x4004094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@deltfilter={0x4c, 0x2d, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xfff2, 0x4}, {0x6, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x81, 0x7f}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40810) landlock_restrict_self(r0, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000008c0)={0x2, 0x10, '\x00', 0x1, &(0x7f0000000880)=[0x0, 0x0]}) chdir(&(0x7f0000000900)='./file0\x00') ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000940)={{}, "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"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x140, 0x238, 0x238, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f0000001940), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, '_V'}}, @common=@hbh={{0x48}, {0x9, 0x1, 0x1, [0x7, 0x563c, 0x3, 0x0, 0x253, 0x5, 0x5, 0xf, 0x0, 0x0, 0x8, 0x0, 0x8000, 0x7ff, 0x7, 0x4], 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x3, 0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x7fffffff, 0x3, 0x1, [0x2, 0x8000, 0x6, 0x958b, 0xc3, 0x9d79, 0x6, 0x84a3, 0x4, 0xffc0, 0x2, 0xffff, 0x186, 0x5, 0x4, 0x80], 0xd}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000001f40)={0x8000000000000000, 0x10, [0x75fa8614, 0x4, 0x6, 0x2], &(0x7f0000001f00)=[0x0, 0x0]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000001f80)={0x4, [0x0, 0x0, 0x0, 0x0]}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000002000)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) setrlimit(0x9, &(0x7f0000002040)={0xffffffffffffff35, 0x66}) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000020c0), r7) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f00000021c0)={0x10000000}) 16.322751537s ago: executing program 4 (id=1470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d03000000000000000013000000240009"], 0x38}}, 0x0) (fail_nth: 1) 16.047331469s ago: executing program 4 (id=1473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x655c, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 16.046581924s ago: executing program 7 (id=1474): syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4840) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) prlimit64(0x0, 0x8, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000002c0)="23000000010006", 0x7) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1010052, &(0x7f00000000c0)={[{}, {@nodiscard}, {@errors_remount_ro}, {@norecovery}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 12.889993038s ago: executing program 4 (id=1476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 12.492542051s ago: executing program 8 (id=1477): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000002340)=""/4096, &(0x7f0000000340)=0x1000) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010019033dd608f80600b0a85d0102030109021b00010908b006090405090184435f070905d7"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 11.578683481s ago: executing program 4 (id=1479): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 11.302211954s ago: executing program 7 (id=1481): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_clone3(&(0x7f0000000500)={0x5018800, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180), {0x41}, &(0x7f0000000880)=""/4096, 0x1000, &(0x7f00000003c0)=""/143, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x5, 0x269}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a400fe00000000b7060000080000001e6400000000000045040300010000001704000001000a00b7040000ff010000720a8dfe000000008500000049000000b700000070b2000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d761ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f7604e26f7fcc059c062234d5595f6fbaa187b81d1106000000040f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a8321e056acf27c34bed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb93ce1c0983cdcb48477b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000a08612a29fc691e4f1f7bd053abb880039381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e44c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6bc7c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c16dc91142a4ea260532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f67906a5963d4fa3e26cc05972c162f223f000000d699e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000000000000000000000000007a4604baa70bda5d5f18f54e9638350a6dd81a55ab5528efd1ef5a564908db7cce99e5c569c2947763b90e03b6d1a53b590e4ff4867f0d86b9af58244866b9df33634c8d85ce1b3bfa3e5bec6989c907c2f46b9a837676e07d87bb7dba3f34694ceb5b9faf10eece00bcfd503ed3f3048782665a848d79e443de4ba97db3a9bde69be7612cb1441c61eadd5bb4494ff2eb189c2ab3a241c12f764c0719650c1b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000480)={0xa70a, r2}, 0x0) landlock_restrict_self(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680), 0x716e96a24400acfe, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 11.223660942s ago: executing program 6 (id=1483): syz_usb_connect(0x3, 0x2d, &(0x7f0000001500)={{0x12, 0x1, 0x0, 0xd3, 0x53, 0x40, 0x10, 0x5fc9, 0x63, 0x48e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x89, 0x1, 0x63, 0x35, 0x29, 0x5, [], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x2, 0xd, 0x27}}]}}]}}]}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200a00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xa3d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = syz_open_dev$sndctrl(0x0, 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000000)=0xfffffffd) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400048c0}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x24, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4, 0x11}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 9.44352707s ago: executing program 3 (id=1486): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x21d0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000000000bf000000000000000000b34d75", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000a1a83fb8c8533b496070094351e1b45a260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x27c}], 0x1}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000900"], 0x184}}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r3}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x149101) dup(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141103) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = io_uring_setup(0x3f00, &(0x7f0000000640)={0x0, 0x6a23, 0x1000, 0x0, 0x17e}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x1e, &(0x7f0000001940)=[{0x0, 0x700}], 0x1) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r9, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r9, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 9.079525502s ago: executing program 3 (id=1487): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x2040400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x2) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_pts(r1, 0x121500) read$msr(0xffffffffffffffff, &(0x7f0000019540)=""/102400, 0x19000) 8.92371523s ago: executing program 1 (id=1488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRES32, @ANYBLOB="000000000000007b8af8ff00000000bfa20000000000f507020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 8.923169061s ago: executing program 8 (id=1489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x3a, 0x0, 0x7f}, 0x2c) (fail_nth: 1) 8.782824579s ago: executing program 7 (id=1490): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) syz_io_uring_setup(0x232, &(0x7f0000000640)={0x0, 0x8d12, 0x80, 0x802, 0x40000330}, &(0x7f0000000040), &(0x7f0000000280)) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 8.12618901s ago: executing program 1 (id=1491): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[], [], 0x2c}) syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000001cc0)='.\x00', 0x1aca4b8, &(0x7f0000000a80)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX, @ANYRES32=r0], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000440)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) 7.169629524s ago: executing program 8 (id=1492): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000002c0)={[{@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40002140, &(0x7f0000000180)=@caif=@rfm={0x25, 0x100, "447189e59e6eeb3f656be7bdf0c239b2"}, 0x80) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) 7.031054805s ago: executing program 3 (id=1493): mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, &(0x7f0000000000)=0x9, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x0) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4a22, 0x0, 0x2, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0xa, @in=@multicast2, 0xfffffffd, 0x4, 0x0, 0x0, 0x3}}, 0xe8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x840, 0x0) ioctl$DRM_IOCTL_VERSION(r6, 0xc0406400, &(0x7f0000002200)={0xdf, 0x4, 0xffff6cc0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000001200)=""/4096}) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r4) 6.431838807s ago: executing program 7 (id=1494): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x70}}, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1}, 0x40c4) r4 = accept(r1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}}, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000d36000/0x1000)=nil, 0x1000, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f00000000c0)) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 6.361915666s ago: executing program 1 (id=1495): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@multiplanar_mmap={0x7, 0xa, 0x4, 0x100000, 0x3, {0x0, 0x2710}, {0x1, 0xc, 0x7, 0x7, 0x80, 0x5, "2852dfcf"}, 0x8, 0x1, {0x0}, 0x5}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x16, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) syz_open_dev$I2C(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6e, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@mpls_mc={0x88a8, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x66, 0x0, 0x81, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x5, 0x3, 0x1, 0x1, 0x6, 0x9}, 0x1, {0xab64}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x34, 0x0, 0x0, 0x1, 0x2, 0xe}, 0x2, {0x3, 0x3ff, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140), 0x80) keyctl$revoke(0x3, r2) keyctl$assume_authority(0x10, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) 5.74717984s ago: executing program 8 (id=1496): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) 5.593050256s ago: executing program 6 (id=1497): r0 = syz_usb_connect$uac1(0x3, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xa1, 0x80, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x2, 0xa6, 0x3, 0x0, 0x5}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x3, 0x6, [0x6, 0x3, 0x7, 0x4, 0x9, 0x2], 0xf0}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x5, 0x40, 0x4, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3c, 0x5, 0x1, {0x7, 0x25, 0x1, 0x82, 0xf7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x0, 0x2, {0x7, 0x25, 0x1, 0x82, 0x7, 0xa9d9}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f00000000c0)={0x40, 0x21, 0x34, {0x34, 0x0, "a3850f94d43fc245e8c993cd9d60f5f35f0b2433eee9dd542e294d16b781f45408f07144bdaf817e35805aa10daa8ebd4838"}}, &(0x7f0000000840)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "1938aee9a22af662bea8f6d6dde9627ff25fdbf42c0ab8948dfeaf80c374b0ba7156b1f1c078eca0790cc4f22c60777202389d1f0569df63893ead0fdf50d93225b896b90e2a99c98ae458780feecb08ef83467fe4cb235fbfa5b158777bfa25abd099486b377ede9f780cda74d606419d3838e046099390b6e2c057d07c7313825be4baf01b57579f4e0939447abdf180b8cedf77a436be7b937694e6159875b4e624ba2746fa03b2ec3345df48974b6909c4d1cf9f552b9bb0a9ca13b34c5c7e5f54bf55970ad650d3d12bcb0c9f89301a4eb9c9798d010f56f3"}}, &(0x7f0000000200)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0xd, 0xf0f, 0x5, [0x0, 0xff000f, 0x72973deeb9d05da0]}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x80, 0x6, 0x5, "02d4d6f1", "846067ea"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x40, 0x80, 0x6, 0xe27, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x1, 0x62, "69fc48b2c1565ca933f638d63cd2d9e2a3bc63597791ff856cd823c23a9ca90d0f3ae760b6b35d357909413d172d509aa5488678543039568ba2b453e3d0f72d1ffd486fcc51df3005b69781c3c726f9305bd44063d951645651eb368881e23d32c4"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xac}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x120}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000540)={0x40, 0xb, 0x2, "f196"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "bcab"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb0}}) 5.362492323s ago: executing program 3 (id=1498): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_clone3(&(0x7f0000000500)={0x5018800, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180), {0x41}, &(0x7f0000000880)=""/4096, 0x1000, &(0x7f00000003c0)=""/143, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x5, 0x269}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000480)={0xa70a, r2}, 0x0) landlock_restrict_self(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 4.200553763s ago: executing program 8 (id=1499): r0 = syz_io_uring_setup(0x445e, &(0x7f0000000080)={0x0, 0x5f3f, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@isdn}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000000102050000000000000000000a000000300001802c000180140003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40800) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfdef) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r7], 0x398}}, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', '', [], 0xa, "cee9"}, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) pread64(r5, &(0x7f0000000b80)=""/4089, 0xff9, 0x5) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000000)='./file1\x00', 0x4480, &(0x7f0000002cc0)=ANY=[], 0x0, 0x2a2, &(0x7f0000000200)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BLKGETSIZE(r11, 0x1260, &(0x7f0000000040)) write$binfmt_script(r10, &(0x7f0000000000), 0xfea7) 3.484629475s ago: executing program 7 (id=1500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x4, 0x3}, &(0x7f0000000000)=0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002140)={'syzkaller1\x00', 0x6bf1c2d5adba9c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000ff000000010000000008000004900080", @ANYRES32, @ANYBLOB="180300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002240)={r4, &(0x7f0000002280)="9d7530980f86de7ccae950063e81c1e37dc36115df1e5035f3cb4e08ed20c4ef7d110558141a521691a42dfae6aba2d3092ee97bf865c72afa83888a0a41aa1f477b109c101249a4b2cf0710ead085e3149c0ec1ab4c989b4734dcd52d4b29c9cea5160dd5c01add062816ba72", &(0x7f0000000080)=@udp=r4}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x101142) ioctl$FS_IOC_RESVSP(r8, 0x40044591, 0x0) r9 = dup2(r0, r8) read$FUSE(r9, &(0x7f00000000c0)={0x2020}, 0x2020) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000040)={0x15, r11, 0x201, 0x70bd2c, 0x27dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0xfffffffffffffdd1, 0x3f, 0xffffffa2}]}, 0xfffffd9d}, 0x1, 0x0, 0x0, 0x4004c8d0}, 0x24000021) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r11, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @void}}}, 0x28}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 3.483673135s ago: executing program 1 (id=1501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x73622a85, 0x0, 0x0, 0x0, 0x0, 0x80000000004}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (fail_nth: 1) 1.710429479s ago: executing program 3 (id=1502): openat$rfkill(0xffffffffffffff9c, 0x0, 0xc2200, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.623544591s ago: executing program 1 (id=1503): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x200001, &(0x7f0000000140)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U9rE0EYx/Hv7E52AyZEMELwYHIzGoT8QW8SsmIwYFxRBPEUiCsKCRED6tHg1UPAaw62vZa+haTtobQkl76KXnIr9LhldhuW9jU8n9v8nuH3JLMvnq3KisTz0fDb92A8Dj6V3vrd9ruz+bxlcgeX9LV5fH/Rgi9oFhrWEzDxYRY+fx0EVn80MOd1C1zAu3WVM8xt9nl5zURDjdDeZAdudM+CaGWc3YUPDIIGqeh8T4OXi/uqwHILHhDiOXFWA87fgA1KOUDoxkWdSvGOgl+zyt7uyevlcefxo2bwt96ePswU7AqwjafSR1byJKtl95Xf9VeNev1pulqzeHJqCvk9Rb/M/ICPCrTps4j6HAr39Xv4o+BftGu9r7LmT/y/8Ifx72iagp92CVRx1u8VUju9/G0Lu6zNNOQG84miSfIiQgghhBBCCCGEEEIIIYQQQgghROIyAAD///VXTgE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) 1.45437407s ago: executing program 4 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 1) 1.454026276s ago: executing program 6 (id=1505): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x2040400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x2) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_pts(r1, 0x121500) read$msr(0xffffffffffffffff, &(0x7f0000019540)=""/102400, 0x19000) 484.689447ms ago: executing program 3 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x8001, 0x4}, 0x41}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000840)={0x20000000, 0x5, "ca6dbd90b2e814d6dbb74b527387277f45eea5586cffd576fa056132f0697eb8", 0xd4, 0x73, 0x5, 0x3240, 0x40, 0x7, 0x5, 0x6, [0x5, 0x3, 0xffffffff, 0xe]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_io_uring_setup(0x22f, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 473.329778ms ago: executing program 1 (id=1507): syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) syz_io_uring_setup(0x232, &(0x7f0000000640)={0x0, 0x8d12, 0x80, 0x802, 0x40000330}, &(0x7f0000000040), &(0x7f0000000280)) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 27.818169ms ago: executing program 4 (id=1508): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xc1, 0x99, 0xf9, 0x5, 0xfc, 0x5, 0xfb, 0xe2, 0xff, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0x1) 22.107938ms ago: executing program 7 (id=1509): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000000)='./file1\x00', 0x4480, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x2a2, &(0x7f0000000200)="$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") r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010000d0400"/20, @ANYRES32=r1, @ANYBLOB="00000000002101002c001280110001006272696467655f736c6176650000000014000580050006000000000008002200", @ANYRES32=r1, @ANYBLOB="7307887766aad35b640f0f9b4f488e39f6d2c283a233cf0f6ea6068fe82e652b80dd06000000ec0c2238508db7ed119e3f03d6ffb5336da88499920e8f79383a904090d6a7fa2b39db2c1c113f3143348dbc7cfa5eb6140d6b6b4d02007e2c9e8d"], 0x4c}, 0x1, 0x0, 0x0, 0x40000044}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x241, 0x0) fcntl$getownex(r3, 0x10, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0xc17a) 0s ago: executing program 8 (id=1510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) kernel console output (not intermixed with test programs): etected capacity change from 0 to 32768 [ 524.561169][T10764] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 524.672003][T10738] BTRFS: device /dev/loop7 (7:7) using temp-fsid 9f907051-0f46-4be6-a47a-b1698a2ac3b1 [ 524.675812][T10735] BTRFS info (device loop1): rebuilding free space tree [ 524.730116][T10738] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1171 (10738) [ 524.868400][T10738] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 524.930030][T10738] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 524.954670][ T8003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.976278][T10738] BTRFS info (device loop7): using free-space-tree [ 525.134151][T10792] BTRFS info (device loop1 state M): max_inline set to 0 [ 525.348506][T10738] BTRFS info (device loop7): rebuilding free space tree [ 525.663682][ T5832] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 526.766170][ T9404] BTRFS info (device loop7): last unmount of filesystem 9f907051-0f46-4be6-a47a-b1698a2ac3b1 [ 527.829140][ T43] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 528.039686][ T43] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 528.090406][ T43] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 528.138942][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 528.147311][ T43] usb 7-1: Product: syz [ 528.175850][ T43] usb 7-1: Manufacturer: syz [ 528.193860][ T43] usb 7-1: SerialNumber: syz [ 528.247891][ T43] usb 7-1: config 0 descriptor?? [ 528.308390][ T43] ims_pcu 7-1:0.0: Zero length descriptor [ 528.340269][ T43] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 528.370493][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 529.671859][ T3077] usb 7-1: USB disconnect, device number 10 [ 530.331207][T10862] loop7: detected capacity change from 0 to 32768 [ 531.287983][T10862] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 531.288016][T10862] allowing incompatible features above 0.0: (unknown version) [ 531.288032][T10862] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 531.329799][T10862] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 531.338082][T10862] bcachefs (loop7): recovering from clean shutdown, journal seq 13 [ 531.412353][T10862] bcachefs (loop7): accounting_read... done [ 531.525806][T10862] bcachefs (loop7): alloc_read... done [ 531.533135][T10862] bcachefs (loop7): snapshots_read... done [ 531.543639][T10862] bcachefs (loop7): journal_replay... done [ 531.550377][T10862] bcachefs (loop7): resume_logged_ops... done [ 531.556840][T10862] bcachefs (loop7): delete_dead_inodes... done [ 531.564887][T10862] bcachefs (loop7): done starting filesystem [ 531.793898][T10874] 9pnet_fd: Insufficient options for proto=fd [ 532.036600][ T9404] bcachefs (loop7): shutting down [ 532.127390][T10879] loop3: detected capacity change from 0 to 64 [ 532.226006][ T9404] bcachefs (loop7): shutdown complete [ 533.416325][T10870] loop6: detected capacity change from 0 to 32768 [ 533.477463][T10870] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1193 (10870) [ 533.609537][T10907] fuse: Unknown parameter '017777777777777777777770x000000000000000d' [ 533.665331][T10870] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 533.730537][T10870] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 533.761339][T10870] BTRFS info (device loop6): using free-space-tree [ 534.017015][T10870] BTRFS info (device loop6): rebuilding free space tree [ 534.352755][ T30] audit: type=1800 audit(1750051878.064:583): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1193" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 534.889426][ T8003] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 535.407264][T10911] loop8: detected capacity change from 0 to 32768 [ 535.489622][T10911] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1207 (10911) [ 535.591611][T10911] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 535.646943][T10911] BTRFS info (device loop8): using sha256 (sha256-x86_64) checksum algorithm [ 535.702672][T10911] BTRFS info (device loop8): using free-space-tree [ 536.149064][T10911] BTRFS info (device loop8): rebuilding free space tree [ 536.162841][T10974] FAULT_INJECTION: forcing a failure. [ 536.162841][T10974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.210646][T10974] CPU: 0 UID: 0 PID: 10974 Comm: syz.7.1199 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 536.210678][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.210693][T10974] Call Trace: [ 536.210703][T10974] [ 536.210714][T10974] dump_stack_lvl+0x189/0x250 [ 536.210758][T10974] ? __pfx____ratelimit+0x10/0x10 [ 536.210798][T10974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.210836][T10974] ? __pfx__printk+0x10/0x10 [ 536.210865][T10974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.210911][T10974] should_fail_ex+0x414/0x560 [ 536.210955][T10974] _copy_from_user+0x2d/0xb0 [ 536.210982][T10974] do_ip_setsockopt+0x40a/0x2d00 [ 536.211017][T10974] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 536.211047][T10974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.211076][T10974] ? aa_sk_perm+0x81e/0x950 [ 536.211113][T10974] ? __pfx_aa_sk_perm+0x10/0x10 [ 536.211140][T10974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.211168][T10974] ? __lock_acquire+0xab9/0xd20 [ 536.211209][T10974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.211250][T10974] ip_setsockopt+0x66/0x110 [ 536.211274][T10974] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 536.211304][T10974] do_sock_setsockopt+0x25a/0x3e0 [ 536.211339][T10974] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 536.211374][T10974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.211404][T10974] ? __fget_files+0x2a/0x420 [ 536.211443][T10974] __x64_sys_setsockopt+0x18b/0x220 [ 536.211482][T10974] do_syscall_64+0xfa/0x3b0 [ 536.211504][T10974] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.211541][T10974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.211565][T10974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.211594][T10974] ? exc_page_fault+0x9f/0xf0 [ 536.211633][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.211657][T10974] RIP: 0033:0x7f9dd2f8e929 [ 536.211678][T10974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.211699][T10974] RSP: 002b:00007f9dd3e9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 536.211725][T10974] RAX: ffffffffffffffda RBX: 00007f9dd31b5fa0 RCX: 00007f9dd2f8e929 [ 536.211744][T10974] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000003 [ 536.211760][T10974] RBP: 00007f9dd3e9c090 R08: 0000000000000001 R09: 0000000000000000 [ 536.211775][T10974] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 536.211792][T10974] R13: 0000000000000000 R14: 00007f9dd31b5fa0 R15: 00007ffd70014698 [ 536.211830][T10974] [ 537.180065][T10245] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 537.223113][T10946] loop6: detected capacity change from 0 to 32768 [ 537.296469][T10953] loop1: detected capacity change from 0 to 32768 [ 537.324322][T10953] btrfs: Bad value for 'max_inline' [ 537.459031][T10946] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 537.515300][T10990] FAULT_INJECTION: forcing a failure. [ 537.515300][T10990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.536712][T10990] CPU: 1 UID: 0 PID: 10990 Comm: syz.8.1216 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 537.536744][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.536761][T10990] Call Trace: [ 537.536770][T10990] [ 537.536782][T10990] dump_stack_lvl+0x189/0x250 [ 537.536825][T10990] ? __pfx____ratelimit+0x10/0x10 [ 537.536864][T10990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.536904][T10990] ? __pfx__printk+0x10/0x10 [ 537.536933][T10990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.536979][T10990] should_fail_ex+0x414/0x560 [ 537.537018][T10990] _copy_from_user+0x2d/0xb0 [ 537.537044][T10990] ___sys_sendmsg+0x158/0x2a0 [ 537.537082][T10990] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.537123][T10990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.537186][T10990] ? __fget_files+0x2a/0x420 [ 537.537212][T10990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.537240][T10990] ? __fget_files+0x3a0/0x420 [ 537.537282][T10990] __x64_sys_sendmsg+0x19b/0x260 [ 537.537318][T10990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.537366][T10990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.537394][T10990] ? rcu_is_watching+0x15/0xb0 [ 537.537433][T10990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.537462][T10990] ? trace_sys_enter+0x25/0x120 [ 537.537502][T10990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.537537][T10990] do_syscall_64+0xfa/0x3b0 [ 537.537559][T10990] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.537596][T10990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.537620][T10990] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.537648][T10990] ? exc_page_fault+0x9f/0xf0 [ 537.537687][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.537711][T10990] RIP: 0033:0x7fb6a9b8e929 [ 537.537731][T10990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.537753][T10990] RSP: 002b:00007fb6aaa28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.537779][T10990] RAX: ffffffffffffffda RBX: 00007fb6a9db5fa0 RCX: 00007fb6a9b8e929 [ 537.537798][T10990] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 537.537814][T10990] RBP: 00007fb6aaa28090 R08: 0000000000000000 R09: 0000000000000000 [ 537.537830][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.537845][T10990] R13: 0000000000000000 R14: 00007fb6a9db5fa0 R15: 00007ffcc27f8f48 [ 537.537883][T10990] [ 537.552052][T10949] tmpfs: Bad value for 'mpol' [ 537.779633][T10946] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 538.199239][ T8003] ocfs2: Unmounting device (7,6) on (node local) [ 540.717507][T11035] loop3: detected capacity change from 0 to 128 [ 540.729587][T11031] loop7: detected capacity change from 0 to 64 [ 541.073550][T11035] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 541.210861][T11035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.669659][T11049] loop1: detected capacity change from 0 to 1024 [ 542.212539][T11049] loop1: detected capacity change from 0 to 512 [ 542.249407][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 542.292569][T11049] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1231: bg 0: block 5: invalid block bitmap [ 542.409737][ T24] usb 4-1: device descriptor read/64, error -71 [ 542.478915][T11049] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 542.525642][T11049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1231: invalid indirect mapped block 3 (level 2) [ 542.641153][T11064] FAULT_INJECTION: forcing a failure. [ 542.641153][T11064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.655113][T11064] CPU: 1 UID: 0 PID: 11064 Comm: syz.8.1232 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 542.655146][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.655162][T11064] Call Trace: [ 542.655172][T11064] [ 542.655183][T11064] dump_stack_lvl+0x189/0x250 [ 542.655232][T11064] ? __pfx____ratelimit+0x10/0x10 [ 542.655271][T11064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.655311][T11064] ? __pfx__printk+0x10/0x10 [ 542.655338][T11064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.655383][T11064] should_fail_ex+0x414/0x560 [ 542.655423][T11064] _copy_from_user+0x2d/0xb0 [ 542.655449][T11064] __sys_bpf+0x1ed/0x860 [ 542.655486][T11064] ? __pfx___sys_bpf+0x10/0x10 [ 542.655537][T11064] ? ksys_write+0x22a/0x250 [ 542.655562][T11064] ? __pfx_ksys_write+0x10/0x10 [ 542.655591][T11064] __x64_sys_bpf+0x7c/0x90 [ 542.655618][T11064] do_syscall_64+0xfa/0x3b0 [ 542.655637][T11064] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.655669][T11064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.655690][T11064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.655714][T11064] ? exc_page_fault+0x9f/0xf0 [ 542.655748][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.655769][T11064] RIP: 0033:0x7fb6a9b8e929 [ 542.655787][T11064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.655805][T11064] RSP: 002b:00007fb6aa9e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.655828][T11064] RAX: ffffffffffffffda RBX: 00007fb6a9db6160 RCX: 00007fb6a9b8e929 [ 542.655844][T11064] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 542.655859][T11064] RBP: 00007fb6aa9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 542.655873][T11064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.655886][T11064] R13: 0000000000000000 R14: 00007fb6a9db6160 R15: 00007ffcc27f8f48 [ 542.655919][T11064] [ 542.857370][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 542.988995][ T24] usb 4-1: device descriptor read/64, error -71 [ 543.127090][ T24] usb usb4-port1: attempt power cycle [ 543.140241][T11049] EXT4-fs (loop1): 1 orphan inode deleted [ 543.226231][T11049] EXT4-fs (loop1): 1 truncate cleaned up [ 543.306234][T11049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.427091][T11069] loop7: detected capacity change from 0 to 1024 [ 543.466158][T11069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.478961][T11069] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.541465][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 544.314216][T11073] loop8: detected capacity change from 0 to 512 [ 544.339398][T11073] EXT4-fs (loop8): DAX unsupported by block device. [ 544.377842][ T9404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.394567][T11073] : renamed from veth0_to_bond (while UP) [ 544.401341][ T24] usb 4-1: device descriptor read/8, error -71 [ 544.420996][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.422289][T11078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1235'. [ 544.539013][T11078] netlink: 'syz.6.1235': attribute type 7 has an invalid length. [ 544.579071][T11078] netlink: 'syz.6.1235': attribute type 8 has an invalid length. [ 544.586808][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1235'. [ 544.648151][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 544.683175][T11083] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20003 [ 544.708943][ T30] audit: type=1326 audit(1750051888.404:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x0 [ 544.776667][T11087] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 544.801409][T11085] loop7: detected capacity change from 0 to 1024 [ 544.832040][ T24] usb 4-1: device descriptor read/8, error -71 [ 544.925702][T11085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.943365][ T24] usb usb4-port1: unable to enumerate USB device [ 545.208535][T11096] loop6: detected capacity change from 0 to 1764 [ 546.240213][T11107] loop8: detected capacity change from 0 to 128 [ 546.274505][ T5988] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 546.380239][T11107] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 546.470096][ T5988] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 546.516874][ T5988] usb 2-1: config 0 has no interface number 0 [ 546.525784][T11107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.567687][ T5988] usb 2-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid maxpacket 58888, setting to 1024 [ 546.666765][ T5988] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 546.777876][ T5988] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 546.959680][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.999127][ T5988] usb 2-1: Product: syz [ 547.003310][ T5988] usb 2-1: Manufacturer: syz [ 547.007909][ T5988] usb 2-1: SerialNumber: syz [ 547.050717][ T9404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.079615][ T5988] usb 2-1: config 0 descriptor?? [ 547.328074][T11100] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.544951][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1247'. [ 548.572154][T11137] xt_connbytes: Forcing CT accounting to be enabled [ 548.579365][T11137] Cannot find add_set index 0 as target [ 549.182882][ T9714] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 549.353278][ T9714] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 253, using maximum allowed: 30 [ 549.578756][ C1] hrtimer: interrupt took 41900 ns [ 549.603495][ T9714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.615266][ T9714] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 549.628507][ T9714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 549.638121][ T9714] usb 4-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.00 [ 549.649918][ T9714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.864352][ T9714] usb 4-1: config 0 descriptor?? [ 550.592919][ T30] audit: type=1800 audit(1750051894.304:585): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1251" name="nullb0" dev="tmpfs" ino=666 res=0 errno=0 [ 550.667570][ T9714] logitech-hidpp-device 0003:046D:C094.000C: unknown main item tag 0x0 [ 550.750381][ T9714] logitech-hidpp-device 0003:046D:C094.000C: reserved main item tag 0xe [ 550.793257][ T9714] logitech-hidpp-device 0003:046D:C094.000C: item fetching failed at offset 4/5 [ 550.827273][ T9714] logitech-hidpp-device 0003:046D:C094.000C: hidpp_probe:parse failed [ 551.148822][T11152] loop7: detected capacity change from 0 to 32768 [ 551.157387][ T9714] logitech-hidpp-device 0003:046D:C094.000C: probe with driver logitech-hidpp-device failed with error -22 [ 551.175982][ T9714] usb 4-1: USB disconnect, device number 23 [ 551.449251][T11155] loop6: detected capacity change from 0 to 16 [ 551.462497][T11152] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 551.462526][T11152] allowing incompatible features above 0.0: (unknown version) [ 551.462543][T11152] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 551.507075][T11152] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 551.515418][T11152] bcachefs (loop7): recovering from clean shutdown, journal seq 13 [ 551.533059][T11159] loop8: detected capacity change from 0 to 16 [ 551.620041][T11155] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 551.638003][T11152] bcachefs (loop7): accounting_read... [ 551.649978][T11159] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 551.663290][T11152] done [ 551.666062][T11152] bcachefs (loop7): alloc_read... done [ 551.674301][T11152] bcachefs (loop7): snapshots_read... done [ 551.689353][T11152] bcachefs (loop7): journal_replay... done [ 551.695929][T11152] bcachefs (loop7): resume_logged_ops... done [ 551.702662][T11152] bcachefs (loop7): delete_dead_inodes... done [ 551.710236][T11152] bcachefs (loop7): done starting filesystem [ 552.305404][T11132] schedule_timeout: wrong timeout value ffffffffffffffdf [ 552.713860][T11132] CPU: 1 UID: 0 PID: 11132 Comm: vivid-000-vid-o Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 552.713899][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.713915][T11132] Call Trace: [ 552.713924][T11132] [ 552.713935][T11132] dump_stack_lvl+0x189/0x250 [ 552.713983][T11132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.714024][T11132] ? __pfx__printk+0x10/0x10 [ 552.714054][T11132] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.714095][T11132] schedule_timeout+0x1e1/0x270 [ 552.714127][T11132] ? __pfx_schedule_timeout+0x10/0x10 [ 552.714170][T11132] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.714198][T11132] ? prepare_to_wait_event+0x437/0x480 [ 552.714240][T11132] vivid_thread_vid_out+0x139f/0x1c90 [ 552.714279][T11132] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.714351][T11132] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 552.714402][T11132] ? __pfx_autoremove_wake_function+0x10/0x10 [ 552.714435][T11132] ? __kthread_parkme+0x7b/0x200 [ 552.714459][T11132] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.714487][T11132] ? __kthread_parkme+0x1a1/0x200 [ 552.714519][T11132] kthread+0x711/0x8a0 [ 552.714551][T11132] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 552.714588][T11132] ? __pfx_kthread+0x10/0x10 [ 552.714614][T11132] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.714647][T11132] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.714681][T11132] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.714709][T11132] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.714745][T11132] ? __pfx_kthread+0x10/0x10 [ 552.714776][T11132] ret_from_fork+0x3fc/0x770 [ 552.714815][T11132] ? __pfx_ret_from_fork+0x10/0x10 [ 552.714858][T11132] ? __switch_to_asm+0x39/0x70 [ 552.714883][T11132] ? __switch_to_asm+0x33/0x70 [ 552.714908][T11132] ? __pfx_kthread+0x10/0x10 [ 552.714938][T11132] ret_from_fork_asm+0x1a/0x30 [ 552.714984][T11132] [ 552.718355][ T5988] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 553.269221][ T30] audit: type=1326 audit(1750051896.664:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 553.589205][ T30] audit: type=1326 audit(1750051896.664:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 554.605957][ T30] audit: type=1326 audit(1750051896.764:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 554.633479][ T9404] bcachefs (loop7): shutting down [ 554.737016][ T5988] usb 2-1: MIDIStreaming interface descriptor not found [ 554.913132][T11181] loop3: detected capacity change from 0 to 8 [ 554.921306][ T30] audit: type=1326 audit(1750051896.764:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 554.961641][T11181] SQUASHFS error: xz decompression failed, data probably corrupt [ 554.969624][T11181] SQUASHFS error: Failed to read block 0x108: -5 [ 554.975956][T11181] SQUASHFS error: Unable to read metadata cache entry [106] [ 554.983316][T11181] SQUASHFS error: Unable to read inode 0x11f [ 555.073316][ T30] audit: type=1326 audit(1750051896.764:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 555.424851][ T9404] bcachefs (loop7): shutdown complete [ 555.451843][ T30] audit: type=1326 audit(1750051896.864:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 555.546019][ T5988] usb 2-1: USB disconnect, device number 21 [ 555.554150][T11192] loop8: detected capacity change from 0 to 1024 [ 555.671092][ T30] audit: type=1326 audit(1750051896.864:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 555.789344][ T30] audit: type=1326 audit(1750051896.864:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 555.820540][T11192] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.913016][ T30] audit: type=1326 audit(1750051896.914:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 556.608809][T11206] FAULT_INJECTION: forcing a failure. [ 556.608809][T11206] name fail_futex, interval 1, probability 0, space 0, times 1 [ 556.868924][T11206] CPU: 0 UID: 0 PID: 11206 Comm: syz.6.1262 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 556.868957][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.868973][T11206] Call Trace: [ 556.868984][T11206] [ 556.868994][T11206] dump_stack_lvl+0x189/0x250 [ 556.869037][T11206] ? __pfx____ratelimit+0x10/0x10 [ 556.869076][T11206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.869115][T11206] ? __pfx__printk+0x10/0x10 [ 556.869150][T11206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.869196][T11206] should_fail_ex+0x414/0x560 [ 556.869234][T11206] get_futex_key+0x1a6/0x16c0 [ 556.869257][T11206] ? __lock_acquire+0xab9/0xd20 [ 556.869306][T11206] ? __pfx_get_futex_key+0x10/0x10 [ 556.869332][T11206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.869374][T11206] futex_wake+0xf8/0x560 [ 556.869406][T11206] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 556.869430][T11206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.869463][T11206] ? __pfx_futex_wake+0x10/0x10 [ 556.869507][T11206] ? ksys_write+0x1cb/0x250 [ 556.869537][T11206] do_futex+0x395/0x420 [ 556.869564][T11206] ? __pfx_vfs_write+0x10/0x10 [ 556.869606][T11206] ? __pfx_do_futex+0x10/0x10 [ 556.869645][T11206] __se_sys_futex+0x36f/0x400 [ 556.869674][T11206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.869701][T11206] ? fput+0xa0/0xd0 [ 556.869733][T11206] ? ksys_write+0x22a/0x250 [ 556.869755][T11206] ? __pfx___se_sys_futex+0x10/0x10 [ 556.869783][T11206] ? __pfx_ksys_write+0x10/0x10 [ 556.869804][T11206] ? rcu_is_watching+0x15/0xb0 [ 556.869847][T11206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.869875][T11206] ? __x64_sys_futex+0x21/0xf0 [ 556.869907][T11206] do_syscall_64+0xfa/0x3b0 [ 556.869929][T11206] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.869966][T11206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.869989][T11206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.870017][T11206] ? exc_page_fault+0x9f/0xf0 [ 556.870055][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.870079][T11206] RIP: 0033:0x7f571bb8e929 [ 556.870100][T11206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.870120][T11206] RSP: 002b:00007f571caba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 556.870145][T11206] RAX: ffffffffffffffda RBX: 00007f571bdb5fa0 RCX: 00007f571bb8e929 [ 556.870164][T11206] RDX: 0000000000800001 RSI: 0000000000000001 RDI: 0000000000000000 [ 556.870185][T11206] RBP: 00007f571caba090 R08: 0000000000000000 R09: 0000000000000000 [ 556.870202][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.870217][T11206] R13: 0000000000000001 R14: 00007f571bdb5fa0 R15: 00007ffc94659868 [ 556.870254][T11206] [ 557.162050][ T30] audit: type=1326 audit(1750051896.914:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 557.185748][ T30] audit: type=1326 audit(1750051896.914:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 557.208087][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.304547][ T30] audit: type=1326 audit(1750051896.974:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 557.328891][ T30] audit: type=1326 audit(1750051897.004:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 557.353488][ T30] audit: type=1326 audit(1750051897.004:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11154 comm="syz.6.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 557.375875][ T30] audit: type=1326 audit(1750051897.514:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.8.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 557.398289][ T30] audit: type=1326 audit(1750051897.514:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.8.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 557.449321][T10245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.786764][T11211] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1266'. [ 558.568633][ T5988] IPVS: starting estimator thread 0... [ 558.778852][T11223] IPVS: using max 24 ests per chain, 57600 per kthread [ 558.825742][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 559.164441][ T24] usb 9-1: too many configurations: 151, using maximum allowed: 8 [ 559.217007][ T24] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 559.326861][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 559.379324][ T24] usb 9-1: Product: syz [ 559.390596][ T24] usb 9-1: Manufacturer: syz [ 559.396362][ T24] usb 9-1: SerialNumber: syz [ 559.457738][ T24] usb 9-1: config 0 descriptor?? [ 559.488530][ T24] ims_pcu 9-1:0.0: Zero length descriptor [ 559.668825][ T24] ims_pcu 9-1:0.0: probe with driver ims_pcu failed with error -22 [ 560.782178][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 560.810203][ T5988] usb 9-1: USB disconnect, device number 2 [ 561.102587][ T24] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 561.140021][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 561.153771][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 561.162034][ T24] usb 7-1: Product: syz [ 561.166331][ T24] usb 7-1: Manufacturer: syz [ 561.209987][ T24] usb 7-1: SerialNumber: syz [ 562.010447][ T24] usb 7-1: config 0 descriptor?? [ 562.053454][ T24] ims_pcu 7-1:0.0: Zero length descriptor [ 562.118579][ T24] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 562.135148][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.142612][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.178260][T11243] loop8: detected capacity change from 0 to 16 [ 562.213228][T11243] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 562.665951][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 562.665993][ T30] audit: type=1326 audit(1750051906.294:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 563.379096][ T6072] usb 7-1: USB disconnect, device number 11 [ 563.482970][ T30] audit: type=1326 audit(1750051906.294:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 563.589072][ T30] audit: type=1326 audit(1750051906.304:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 563.704763][ T30] audit: type=1326 audit(1750051906.304:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 564.000782][ T30] audit: type=1326 audit(1750051906.304:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 564.442171][ T30] audit: type=1326 audit(1750051906.304:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 564.507842][T11264] loop8: detected capacity change from 0 to 256 [ 564.515153][ T30] audit: type=1326 audit(1750051906.304:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 564.655525][ T30] audit: type=1326 audit(1750051906.304:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 564.778284][ T30] audit: type=1326 audit(1750051906.304:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 564.828850][ T30] audit: type=1326 audit(1750051906.314:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.8.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 565.763892][T11256] loop3: detected capacity change from 0 to 32768 [ 566.626206][T11262] loop1: detected capacity change from 0 to 32768 [ 566.640799][T11256] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 566.686164][T11262] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1275 (11262) [ 566.797098][T11262] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 566.862132][ T5847] ocfs2: Unmounting device (7,3) on (node local) [ 566.919364][T11262] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 566.978884][T11262] BTRFS info (device loop1): using free-space-tree [ 566.999468][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 566.999908][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 567.081127][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 567.157435][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 567.269463][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 567.339901][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 567.393108][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 567.499810][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 567.529433][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 567.582759][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 567.655167][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 567.726983][T11262] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 567.859864][T11262] BTRFS error (device loop1): open_ctree failed: -12 [ 568.663591][T11309] loop3: detected capacity change from 0 to 32768 [ 568.721349][T11309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1284 (11309) [ 568.832824][T11339] loop1: detected capacity change from 0 to 1024 [ 568.852815][T11309] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 568.901771][T11309] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 568.941580][T11339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.965061][T11309] BTRFS info (device loop3): using free-space-tree [ 569.204821][T11324] loop7: detected capacity change from 0 to 32768 [ 570.089277][T11309] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 570.089779][T11309] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 570.145347][T11309] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 570.178091][T11327] loop8: detected capacity change from 0 to 32768 [ 570.190907][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.203465][T11327] BTRFS: device /dev/loop8 (7:8) using temp-fsid 419ad88e-04cd-47b2-abca-0683ec6c9251 [ 570.302481][T11327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1285 (11327) [ 570.306159][T11324] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 570.407838][T11309] BTRFS error (device loop3): open_ctree failed: -12 [ 570.418252][T11327] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 570.476140][T11327] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 570.485390][T11327] BTRFS info (device loop8): using free-space-tree [ 570.492634][T11324] allowing incompatible features above 0.0: (unknown version) [ 570.501656][T11324] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 570.525914][T11324] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 570.536958][T11324] bcachefs (loop7): recovering from clean shutdown, journal seq 13 [ 570.821635][T11327] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 570.822013][T11327] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 570.870046][T11324] bcachefs (loop7): accounting_read... [ 571.057094][T11327] BTRFS error (device loop8): open_ctree failed: -12 [ 571.141784][T11324] done [ 571.144868][T11324] bcachefs (loop7): alloc_read... done [ 571.164214][T11324] bcachefs (loop7): snapshots_read... done [ 571.224935][T11324] bcachefs (loop7): journal_replay... done [ 571.287695][T11324] bcachefs (loop7): resume_logged_ops... done [ 571.323619][T11324] bcachefs (loop7): delete_dead_inodes... done [ 571.369859][T11324] bcachefs (loop7): done starting filesystem [ 571.631587][T11398] loop3: detected capacity change from 0 to 512 [ 571.709059][ T9404] bcachefs (loop7): shutting down [ 571.749599][T11397] loop8: detected capacity change from 0 to 64 [ 571.837409][T11398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.886598][T11398] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.957838][ T9404] bcachefs (loop7): shutdown complete [ 572.981496][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.360884][T11383] loop1: detected capacity change from 0 to 40427 [ 573.461202][T11389] loop6: detected capacity change from 0 to 32768 [ 573.480717][T11383] F2FS-fs (loop1): invalid crc value [ 573.543506][T11389] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 573.609697][T11389] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 573.963968][T11383] F2FS-fs (loop1): Start checkpoint disabled! [ 573.964670][ T8003] ocfs2: Unmounting device (7,6) on (node local) [ 574.098825][ T3077] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 574.290260][ T3077] usb 9-1: Using ep0 maxpacket: 16 [ 574.319718][ T3077] usb 9-1: config 0 interface 0 has no altsetting 0 [ 574.369962][ T3077] usb 9-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=48.e3 [ 574.399896][ T3077] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.409199][ T5839] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 574.418395][ T3077] usb 9-1: Product: syz [ 574.433239][ T3077] usb 9-1: Manufacturer: syz [ 574.437852][ T3077] usb 9-1: SerialNumber: syz [ 574.470628][ T3077] usb 9-1: config 0 descriptor?? [ 576.260269][T11465] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1306'. [ 577.049193][ T3077] usb 9-1: USB disconnect, device number 3 [ 578.375572][T11490] FAULT_INJECTION: forcing a failure. [ 578.375572][T11490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.438658][T11490] CPU: 1 UID: 0 PID: 11490 Comm: syz.8.1312 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 578.438692][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.438708][T11490] Call Trace: [ 578.438722][T11490] [ 578.438733][T11490] dump_stack_lvl+0x189/0x250 [ 578.438778][T11490] ? __pfx____ratelimit+0x10/0x10 [ 578.438817][T11490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.438858][T11490] ? __pfx__printk+0x10/0x10 [ 578.438898][T11490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.438944][T11490] should_fail_ex+0x414/0x560 [ 578.438983][T11490] _copy_from_user+0x2d/0xb0 [ 578.439010][T11490] do_tcp_setsockopt+0x47d/0x1f10 [ 578.439040][T11490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.439077][T11490] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 578.439114][T11490] ? __pfx___mutex_lock+0x10/0x10 [ 578.439135][T11490] ? rcu_read_lock_any_held+0xb3/0x120 [ 578.439161][T11490] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 578.439189][T11490] ? vfs_write+0x8d8/0xa90 [ 578.439217][T11490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.439245][T11490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.439273][T11490] ? tcp_setsockopt+0x3d/0xe0 [ 578.439301][T11490] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 578.439331][T11490] smc_setsockopt+0x232/0xab0 [ 578.439376][T11490] ? __pfx_smc_setsockopt+0x10/0x10 [ 578.439412][T11490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.439445][T11490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.439473][T11490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.439501][T11490] ? __pfx_smc_setsockopt+0x10/0x10 [ 578.439540][T11490] do_sock_setsockopt+0x25a/0x3e0 [ 578.439575][T11490] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 578.439609][T11490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.439639][T11490] ? __fget_files+0x2a/0x420 [ 578.439679][T11490] __x64_sys_setsockopt+0x18b/0x220 [ 578.439718][T11490] do_syscall_64+0xfa/0x3b0 [ 578.439739][T11490] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.439777][T11490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.439800][T11490] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.439829][T11490] ? exc_page_fault+0x9f/0xf0 [ 578.439868][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.439892][T11490] RIP: 0033:0x7fb6a9b8e929 [ 578.439913][T11490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.439934][T11490] RSP: 002b:00007fb6aaa28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 578.439959][T11490] RAX: ffffffffffffffda RBX: 00007fb6a9db5fa0 RCX: 00007fb6a9b8e929 [ 578.439979][T11490] RDX: 0000000000000006 RSI: 0000000000000006 RDI: 0000000000000003 [ 578.439995][T11490] RBP: 00007fb6aaa28090 R08: 0000000000000004 R09: 0000000000000000 [ 578.440011][T11490] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 578.440027][T11490] R13: 0000000000000000 R14: 00007fb6a9db5fa0 R15: 00007ffcc27f8f48 [ 578.440066][T11490] [ 578.795297][T11475] loop1: detected capacity change from 0 to 32768 [ 579.208110][T11475] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 579.208141][T11475] allowing incompatible features above 0.0: (unknown version) [ 579.208156][T11475] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 579.573245][T11475] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 579.590808][T11475] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 579.789157][T11475] bcachefs (loop1): accounting_read... done [ 579.855849][T11475] bcachefs (loop1): alloc_read... done [ 579.917518][T11481] loop7: detected capacity change from 0 to 32768 [ 579.929976][T11505] loop8: detected capacity change from 0 to 16 [ 579.936193][T11475] bcachefs (loop1): snapshots_read... done [ 579.952168][T11481] btrfs: Deprecated parameter 'usebackuproot' [ 579.958250][T11481] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 579.987239][T11505] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 580.025846][T11475] bcachefs (loop1): journal_replay... done [ 580.089188][T11475] bcachefs (loop1): resume_logged_ops... done [ 580.133436][T11475] bcachefs (loop1): delete_dead_inodes... done [ 580.145638][T11481] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1297 (11481) [ 580.226075][T11475] bcachefs (loop1): done starting filesystem [ 580.315002][T11510] binder: BINDER_SET_CONTEXT_MGR already set [ 580.341136][T11481] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 580.369088][T11510] binder: 11509:11510 ioctl 4018620d 2000000001c0 returned -16 [ 580.468140][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 580.468180][ T30] audit: type=1326 audit(1750051924.114:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 580.790167][T11481] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 580.883607][T11481] BTRFS info (device loop7): using free-space-tree [ 580.979311][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 580.979736][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 581.033010][ T30] audit: type=1326 audit(1750051924.114:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 581.064534][ T30] audit: type=1326 audit(1750051924.114:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 581.093019][ T30] audit: type=1326 audit(1750051924.114:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 581.150182][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 581.150574][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 581.224613][ T30] audit: type=1326 audit(1750051924.114:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 581.269465][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 581.269840][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 581.298958][ T5832] bcachefs (loop1): shutting down [ 581.379194][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 581.379543][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 581.429299][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 581.490703][ T30] audit: type=1326 audit(1750051924.114:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 581.500368][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 581.536151][T11527] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1321'. [ 581.594080][ T5832] bcachefs (loop1): shutdown complete [ 581.688488][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 581.689448][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 581.714035][ T30] audit: type=1326 audit(1750051924.114:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 581.859516][T11481] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 581.873816][ T30] audit: type=1326 audit(1750051924.114:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 581.879066][T11481] BTRFS error (device loop7): open_ctree failed: -12 [ 581.961662][ T30] audit: type=1326 audit(1750051924.124:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 582.057215][ T30] audit: type=1326 audit(1750051924.154:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.8.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a9b8e929 code=0x7ffc0000 [ 583.924277][T11560] FAULT_INJECTION: forcing a failure. [ 583.924277][T11560] name failslab, interval 1, probability 0, space 0, times 0 [ 583.977289][T11560] CPU: 1 UID: 0 PID: 11560 Comm: syz.7.1326 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 583.977321][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.977337][T11560] Call Trace: [ 583.977347][T11560] [ 583.977358][T11560] dump_stack_lvl+0x189/0x250 [ 583.977401][T11560] ? __pfx____ratelimit+0x10/0x10 [ 583.977440][T11560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.977480][T11560] ? __pfx__printk+0x10/0x10 [ 583.977515][T11560] ? __pfx___might_resched+0x10/0x10 [ 583.977557][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.977594][T11560] should_fail_ex+0x414/0x560 [ 583.977633][T11560] should_failslab+0xa8/0x100 [ 583.977662][T11560] kmem_cache_alloc_noprof+0x73/0x3c0 [ 583.977702][T11560] ? fuse_get_req+0x7b9/0x10b0 [ 583.977746][T11560] fuse_get_req+0x7b9/0x10b0 [ 583.977786][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.977814][T11560] ? kernel_text_address+0xa5/0xe0 [ 583.977846][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.977881][T11560] ? __pfx_fuse_get_req+0x10/0x10 [ 583.977940][T11560] __fuse_simple_request+0x2aa/0x18d0 [ 583.977977][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978006][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978038][T11560] ? unwind_next_frame+0xa5/0x2390 [ 583.978074][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978116][T11560] ? __pfx___fuse_simple_request+0x10/0x10 [ 583.978153][T11560] ? __kasan_check_byte+0x12/0x40 [ 583.978180][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978208][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978236][T11560] ? __kasan_check_byte+0x12/0x40 [ 583.978263][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978292][T11560] ? rcu_is_watching+0x15/0xb0 [ 583.978331][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978359][T11560] ? lock_release+0x4b/0x3e0 [ 583.978392][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978420][T11560] ? lock_release+0x4b/0x3e0 [ 583.978461][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978489][T11560] ? is_bpf_text_address+0x292/0x2b0 [ 583.978527][T11560] ? is_bpf_text_address+0x26/0x2b0 [ 583.978573][T11560] fuse_getxattr+0x2d7/0x470 [ 583.978607][T11560] ? unwind_get_return_address+0x4d/0x90 [ 583.978645][T11560] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 583.978679][T11560] ? __pfx_fuse_getxattr+0x10/0x10 [ 583.978734][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978763][T11560] ? check_path+0x21/0x40 [ 583.978785][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978814][T11560] ? check_noncircular+0xe0/0x160 [ 583.978844][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978885][T11560] ? lockdep_unlock+0x89/0x120 [ 583.978916][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.978943][T11560] ? validate_chain+0x897/0x2140 [ 583.978973][T11560] fuse_xattr_get+0x80/0xa0 [ 583.979006][T11560] ? __pfx_fuse_xattr_get+0x10/0x10 [ 583.979043][T11560] __vfs_getxattr+0x3f4/0x430 [ 583.979091][T11560] cap_inode_need_killpriv+0x45/0x60 [ 583.979119][T11560] security_inode_need_killpriv+0x89/0x270 [ 583.979148][T11560] file_remove_privs_flags+0x297/0x5f0 [ 583.979196][T11560] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 583.979247][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.979276][T11560] ? generic_write_checks_count+0x43e/0x540 [ 583.979315][T11560] file_modified_flags+0x4c/0x560 [ 583.979347][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.979375][T11560] ? generic_write_checks+0xc8/0x110 [ 583.979410][T11560] fuse_file_write_iter+0x39d/0x10a0 [ 583.979458][T11560] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 583.979522][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.979560][T11560] do_iter_readv_writev+0x56e/0x7f0 [ 583.979591][T11560] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 583.979614][T11560] ? rcu_read_lock_any_held+0xb3/0x120 [ 583.979650][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.979687][T11560] vfs_writev+0x31a/0x960 [ 583.979723][T11560] ? __lock_acquire+0xab9/0xd20 [ 583.979759][T11560] ? __pfx_vfs_writev+0x10/0x10 [ 583.979808][T11560] ? __fget_files+0x2a/0x420 [ 583.979841][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.979869][T11560] ? __fget_files+0x3a0/0x420 [ 583.979895][T11560] ? __fget_files+0x2a/0x420 [ 583.979927][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.979960][T11560] do_writev+0x14d/0x2d0 [ 583.979994][T11560] ? __pfx_do_writev+0x10/0x10 [ 583.980021][T11560] ? rcu_is_watching+0x15/0xb0 [ 583.980066][T11560] ? do_syscall_64+0xbe/0x3b0 [ 583.980099][T11560] do_syscall_64+0xfa/0x3b0 [ 583.980121][T11560] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.980158][T11560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.980181][T11560] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.980209][T11560] ? exc_page_fault+0x9f/0xf0 [ 583.980248][T11560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.980272][T11560] RIP: 0033:0x7f9dd2f8e929 [ 583.980293][T11560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.980314][T11560] RSP: 002b:00007f9dd3e9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 583.980340][T11560] RAX: ffffffffffffffda RBX: 00007f9dd31b5fa0 RCX: 00007f9dd2f8e929 [ 583.980359][T11560] RDX: 0000000000000002 RSI: 0000200000001340 RDI: 0000000000000005 [ 583.980375][T11560] RBP: 00007f9dd3e9c090 R08: 0000000000000000 R09: 0000000000000000 [ 583.980391][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.980406][T11560] R13: 0000000000000000 R14: 00007f9dd31b5fa0 R15: 00007ffd70014698 [ 583.980445][T11560] [ 585.540557][T11593] loop6: detected capacity change from 0 to 16 [ 585.583101][T11593] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 585.729803][T11592] loop3: detected capacity change from 0 to 32768 [ 585.790510][T11596] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1333'. [ 585.893818][T11596] NCSI netlink: No device for ifindex 0 [ 586.276466][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 586.276506][ T30] audit: type=1326 audit(1750051929.854:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 586.458885][ T30] audit: type=1326 audit(1750051929.854:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 586.558976][ T30] audit: type=1326 audit(1750051929.854:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 586.658239][ T30] audit: type=1326 audit(1750051929.854:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 586.849046][ T5938] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 586.936760][T11592] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 586.936790][T11592] allowing incompatible features above 0.0: (unknown version) [ 586.936806][T11592] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 586.978882][T11592] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 586.987156][T11592] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 587.004085][ T30] audit: type=1326 audit(1750051929.864:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 587.030181][ T5938] usb 9-1: device descriptor read/64, error -71 [ 587.036997][ T30] audit: type=1326 audit(1750051929.864:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 587.060346][ T30] audit: type=1326 audit(1750051929.894:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 587.083742][ T30] audit: type=1326 audit(1750051929.894:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 587.128636][T11592] bcachefs (loop3): accounting_read... done [ 587.155217][T11592] bcachefs (loop3): alloc_read... done [ 587.161780][T11592] bcachefs (loop3): snapshots_read... done [ 587.171716][T11592] bcachefs (loop3): journal_replay... done [ 587.178267][T11592] bcachefs (loop3): resume_logged_ops... done [ 587.184771][T11592] bcachefs (loop3): delete_dead_inodes... done [ 587.192342][T11592] bcachefs (loop3): done starting filesystem [ 587.209000][ T30] audit: type=1326 audit(1750051929.894:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 587.269201][ T5938] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 587.324228][ T30] audit: type=1326 audit(1750051929.904:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571bb8e929 code=0x7ffc0000 [ 587.387461][ T5847] bcachefs (loop3): shutting down [ 587.443364][ T5938] usb 9-1: device descriptor read/64, error -71 [ 587.462513][ T5847] bcachefs (loop3): shutdown complete [ 587.568814][ T5988] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 587.577425][ T5938] usb usb9-port1: attempt power cycle [ 587.761142][ T5988] usb 7-1: Using ep0 maxpacket: 32 [ 587.780697][T11625] overlayfs: failed to resolve './file0': -2 [ 587.789313][ T5988] usb 7-1: config 0 has an invalid interface number: 155 but max is 0 [ 587.817842][ T5988] usb 7-1: config 0 has no interface number 0 [ 587.838194][ T5988] usb 7-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 587.888901][ T5988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.938787][ T5988] usb 7-1: Product: syz [ 587.942956][ T5988] usb 7-1: Manufacturer: syz [ 587.980717][ T5988] usb 7-1: SerialNumber: syz [ 587.984214][ T5938] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 588.015054][ T5988] usb 7-1: config 0 descriptor?? [ 588.039507][ T5938] usb 9-1: device descriptor read/8, error -71 [ 588.214835][T11633] loop1: detected capacity change from 0 to 1024 [ 588.289252][T11633] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 588.319121][T11633] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 588.348814][ T5938] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 588.353450][ T5988] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.155/input/input12 [ 588.386038][T11633] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #5: comm syz.1.1340: unexpected bad inode w/o EXT4_IGET_BAD [ 588.427827][ T5184] bcm5974 7-1:0.155: could not read from device [ 588.434513][ T5938] usb 9-1: device descriptor read/8, error -71 [ 588.462021][T11633] EXT4-fs (loop1): Remounting filesystem read-only [ 588.489267][ T5988] usb 7-1: USB disconnect, device number 12 [ 588.504052][ T5184] bcm5974 7-1:0.155: could not read from device [ 588.511600][T11633] EXT4-fs (loop1): no journal found [ 588.549467][T11633] EXT4-fs (loop1): can't get journal size [ 588.575990][ T5938] usb usb9-port1: unable to enumerate USB device [ 588.580469][T11633] EXT4-fs (loop1): failed to initialize system zone (-117) [ 588.603277][T11633] EXT4-fs (loop1): mount failed [ 589.141680][ T5839] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 589.328185][T11653] FAULT_INJECTION: forcing a failure. [ 589.328185][T11653] name failslab, interval 1, probability 0, space 0, times 0 [ 589.488795][T11653] CPU: 0 UID: 0 PID: 11653 Comm: syz.8.1344 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 589.488831][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 589.488847][T11653] Call Trace: [ 589.488858][T11653] [ 589.488870][T11653] dump_stack_lvl+0x189/0x250 [ 589.488917][T11653] ? __pfx____ratelimit+0x10/0x10 [ 589.488956][T11653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.488997][T11653] ? __pfx__printk+0x10/0x10 [ 589.489032][T11653] ? __pfx___might_resched+0x10/0x10 [ 589.489077][T11653] should_fail_ex+0x414/0x560 [ 589.489116][T11653] should_failslab+0xa8/0x100 [ 589.489146][T11653] __kmalloc_cache_noprof+0x70/0x3d0 [ 589.489171][T11653] ? __se_sys_memfd_create+0x211/0x780 [ 589.489212][T11653] __se_sys_memfd_create+0x211/0x780 [ 589.489251][T11653] do_syscall_64+0xfa/0x3b0 [ 589.489273][T11653] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.489311][T11653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.489342][T11653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 589.489371][T11653] ? exc_page_fault+0x9f/0xf0 [ 589.489410][T11653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.489435][T11653] RIP: 0033:0x7fb6a9b8e929 [ 589.489457][T11653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.489478][T11653] RSP: 002b:00007fb6aaa27e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 589.489505][T11653] RAX: ffffffffffffffda RBX: 0000000000000625 RCX: 00007fb6a9b8e929 [ 589.489523][T11653] RDX: 00007fb6aaa27ef0 RSI: 0000000000000000 RDI: 00007fb6a9c114cc [ 589.489541][T11653] RBP: 0000200000000800 R08: 00007fb6aaa27bb7 R09: 00007fb6aaa27e40 [ 589.489559][T11653] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 589.489576][T11653] R13: 00007fb6aaa27ef0 R14: 00007fb6aaa27eb0 R15: 0000200000000000 [ 589.489615][T11653] [ 590.341347][T11663] binder: BINDER_SET_CONTEXT_MGR already set [ 590.347357][T11663] binder: 11658:11663 ioctl 4018620d 2000000001c0 returned -16 [ 590.578986][T11667] loop8: detected capacity change from 0 to 24 [ 590.586380][T11667] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 590.681182][T11667] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 590.766283][T11667] romfs: Unknown parameter 'lowerdir' [ 590.788229][T11674] loop6: detected capacity change from 0 to 1024 [ 590.947256][T11674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.164114][ T8003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.796240][T11706] loop3: detected capacity change from 0 to 512 [ 592.802993][T11704] bond0: option all_slaves_active: invalid value (5) [ 592.961905][T11706] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 593.035571][T11706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.375583][T11714] syz_tun: entered allmulticast mode [ 593.709898][T11717] bond0: option all_slaves_active: invalid value (5) [ 593.881536][T11686] loop8: detected capacity change from 0 to 32768 [ 593.993452][T11686] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1352 (11686) [ 594.119756][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.157905][T11686] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 594.224057][T11686] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 594.258591][T11686] BTRFS info (device loop8): using free-space-tree [ 594.358113][T11686] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 594.358502][T11686] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 594.479288][ T5938] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 594.518503][T11686] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 594.519201][T11686] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 594.598379][T11686] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 594.682726][T11686] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 594.718232][ T5938] usb 7-1: Using ep0 maxpacket: 16 [ 594.861576][T11740] loop3: detected capacity change from 0 to 4096 [ 594.895092][T11686] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 594.896157][T11686] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 594.961905][ T5938] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 595.081986][T11686] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 595.234502][T11744] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 595.324670][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 595.324723][ T30] audit: type=1800 audit(1750051939.014:684): pid=11740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1362" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 595.380466][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.515175][ T5938] usb 7-1: Product: syz [ 595.590841][ T5938] usb 7-1: Manufacturer: syz [ 595.716698][ T5938] usb 7-1: SerialNumber: syz [ 595.737811][T11686] BTRFS error (device loop8): open_ctree failed: -12 [ 596.262130][ T5938] r8152-cfgselector 7-1: Unknown version 0x0000 [ 596.374206][ T5938] r8152-cfgselector 7-1: config 0 descriptor?? [ 597.011841][ T5938] r8152-cfgselector 7-1: Unknown version 0x0000 [ 597.071884][T11748] binder: BINDER_SET_CONTEXT_MGR already set [ 597.155254][ T5938] r8152-cfgselector 7-1: bad CDC descriptors [ 597.263026][T11748] binder: 11747:11748 ioctl 4018620d 2000000001c0 returned -16 [ 597.715083][ T5938] r8152-cfgselector 7-1: USB disconnect, device number 13 [ 599.482761][T11773] loop6: detected capacity change from 0 to 4096 [ 599.682210][T11774] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 599.728153][ T30] audit: type=1800 audit(1750051943.434:685): pid=11773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1369" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 602.962309][T11792] loop1: detected capacity change from 0 to 32768 [ 603.033032][T11792] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 603.058608][T11799] binder: BINDER_SET_CONTEXT_MGR already set [ 603.126396][T11799] binder: 11797:11799 ioctl 4018620d 2000000001c0 returned -16 [ 603.135776][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1379'. [ 603.141906][T11792] XFS (loop1): Ending clean mount [ 603.183523][ T30] audit: type=1800 audit(1750051946.874:686): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1376" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 603.404586][ T5832] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 603.847506][T11813] netlink: 'syz.7.1380': attribute type 2 has an invalid length. [ 604.079464][T11813] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1380'. [ 604.349689][T11823] FAULT_INJECTION: forcing a failure. [ 604.349689][T11823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.358308][T11818] loop3: detected capacity change from 0 to 4096 [ 604.418892][T11823] CPU: 0 UID: 0 PID: 11823 Comm: syz.6.1385 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 604.418922][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.418937][T11823] Call Trace: [ 604.418946][T11823] [ 604.418957][T11823] dump_stack_lvl+0x189/0x250 [ 604.418999][T11823] ? __pfx____ratelimit+0x10/0x10 [ 604.419037][T11823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.419074][T11823] ? __pfx__printk+0x10/0x10 [ 604.419101][T11823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.419147][T11823] should_fail_ex+0x414/0x560 [ 604.419186][T11823] _copy_from_user+0x2d/0xb0 [ 604.419212][T11823] __sys_bpf+0x1ed/0x860 [ 604.419248][T11823] ? __pfx___sys_bpf+0x10/0x10 [ 604.419302][T11823] ? ksys_write+0x22a/0x250 [ 604.419329][T11823] ? __pfx_ksys_write+0x10/0x10 [ 604.419349][T11823] ? rcu_is_watching+0x15/0xb0 [ 604.419397][T11823] __x64_sys_bpf+0x7c/0x90 [ 604.419428][T11823] do_syscall_64+0xfa/0x3b0 [ 604.419449][T11823] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.419484][T11823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.419507][T11823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.419533][T11823] ? exc_page_fault+0x9f/0xf0 [ 604.419571][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.419594][T11823] RIP: 0033:0x7f571bb8e929 [ 604.419614][T11823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.419635][T11823] RSP: 002b:00007f571caba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 604.419661][T11823] RAX: ffffffffffffffda RBX: 00007f571bdb5fa0 RCX: 00007f571bb8e929 [ 604.419680][T11823] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 0000000000000019 [ 604.419696][T11823] RBP: 00007f571caba090 R08: 0000000000000000 R09: 0000000000000000 [ 604.419712][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.419728][T11823] R13: 0000000000000000 R14: 00007f571bdb5fa0 R15: 00007ffc94659868 [ 604.419766][T11823] [ 604.639042][T11818] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 604.655483][T11825] loop1: detected capacity change from 0 to 4096 [ 604.663817][T11825] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 604.687562][T11825] ntfs3(loop1): mft corrupted [ 604.692440][T11825] ntfs3(loop1): Failed to load $Volume (-22). [ 604.696093][T11818] ntfs3(loop3): mft corrupted [ 604.791333][T11818] ntfs3(loop3): Failed to load $Volume (-22). [ 605.474755][T11846] loop6: detected capacity change from 0 to 32768 [ 605.502268][T11846] (syz.6.1388,11846,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 605.516059][T11846] (syz.6.1388,11846,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 605.566919][T11846] JBD2: Ignoring recovery information on journal [ 605.637248][T11846] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 605.682983][T11840] loop8: detected capacity change from 0 to 4096 [ 605.793794][T11840] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512). [ 606.550495][T11865] FAULT_INJECTION: forcing a failure. [ 606.550495][T11865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.573693][T11865] CPU: 1 UID: 0 PID: 11865 Comm: syz.3.1393 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 606.573725][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.573741][T11865] Call Trace: [ 606.573751][T11865] [ 606.573762][T11865] dump_stack_lvl+0x189/0x250 [ 606.573810][T11865] ? __pfx____ratelimit+0x10/0x10 [ 606.573849][T11865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.573889][T11865] ? __pfx__printk+0x10/0x10 [ 606.573917][T11865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.573963][T11865] should_fail_ex+0x414/0x560 [ 606.574001][T11865] _copy_from_user+0x2d/0xb0 [ 606.574027][T11865] ___sys_sendmsg+0x158/0x2a0 [ 606.574064][T11865] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.574105][T11865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.574167][T11865] ? __fget_files+0x2a/0x420 [ 606.574194][T11865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.574222][T11865] ? __fget_files+0x3a0/0x420 [ 606.574268][T11865] __x64_sys_sendmsg+0x19b/0x260 [ 606.574304][T11865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 606.574349][T11865] ? __pfx_ksys_write+0x10/0x10 [ 606.574370][T11865] ? rcu_is_watching+0x15/0xb0 [ 606.574416][T11865] ? do_syscall_64+0xbe/0x3b0 [ 606.574444][T11865] do_syscall_64+0xfa/0x3b0 [ 606.574466][T11865] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.574504][T11865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.574528][T11865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 606.574555][T11865] ? exc_page_fault+0x9f/0xf0 [ 606.574595][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.574620][T11865] RIP: 0033:0x7f9b19f8e929 [ 606.574640][T11865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.574662][T11865] RSP: 002b:00007f9b17df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.574688][T11865] RAX: ffffffffffffffda RBX: 00007f9b1a1b5fa0 RCX: 00007f9b19f8e929 [ 606.574707][T11865] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 606.574724][T11865] RBP: 00007f9b17df6090 R08: 0000000000000000 R09: 0000000000000000 [ 606.574740][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.574756][T11865] R13: 0000000000000000 R14: 00007f9b1a1b5fa0 R15: 00007ffccd2ecfb8 [ 606.574793][T11865] [ 606.803026][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.947769][ T8003] ocfs2: Unmounting device (7,6) on (node local) [ 607.535356][T11878] FAULT_INJECTION: forcing a failure. [ 607.535356][T11878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.648469][T11878] CPU: 0 UID: 0 PID: 11878 Comm: syz.7.1397 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 607.648502][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 607.648517][T11878] Call Trace: [ 607.648528][T11878] [ 607.648538][T11878] dump_stack_lvl+0x189/0x250 [ 607.648582][T11878] ? __pfx____ratelimit+0x10/0x10 [ 607.648621][T11878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.648661][T11878] ? __pfx__printk+0x10/0x10 [ 607.648689][T11878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.648739][T11878] should_fail_ex+0x414/0x560 [ 607.648778][T11878] _copy_from_user+0x2d/0xb0 [ 607.648805][T11878] core_sys_select+0x4b7/0xa20 [ 607.648847][T11878] ? __pfx_core_sys_select+0x10/0x10 [ 607.648903][T11878] ? __pfx_set_user_sigmask+0x10/0x10 [ 607.648956][T11878] __se_sys_pselect6+0x27a/0x300 [ 607.648981][T11878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.649016][T11878] ? __pfx___se_sys_pselect6+0x10/0x10 [ 607.649043][T11878] ? __pfx_ksys_write+0x10/0x10 [ 607.649063][T11878] ? rcu_is_watching+0x15/0xb0 [ 607.649108][T11878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.649136][T11878] ? __x64_sys_pselect6+0x21/0xf0 [ 607.649166][T11878] do_syscall_64+0xfa/0x3b0 [ 607.649189][T11878] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.649226][T11878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.649250][T11878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.649283][T11878] ? exc_page_fault+0x9f/0xf0 [ 607.649323][T11878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.649347][T11878] RIP: 0033:0x7f9dd2f8e929 [ 607.649368][T11878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.649390][T11878] RSP: 002b:00007f9dd3e9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 607.649416][T11878] RAX: ffffffffffffffda RBX: 00007f9dd31b5fa0 RCX: 00007f9dd2f8e929 [ 607.649435][T11878] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000040 [ 607.649453][T11878] RBP: 00007f9dd3e9c090 R08: 0000000000000000 R09: 0000000000000000 [ 607.649470][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.649486][T11878] R13: 0000000000000000 R14: 00007f9dd31b5fa0 R15: 00007ffd70014698 [ 607.649524][T11878] [ 608.094491][T11887] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1394'. [ 609.300449][T11915] loop6: detected capacity change from 0 to 128 [ 610.362893][T11918] loop3: detected capacity change from 0 to 32768 [ 610.404717][T11915] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 610.527510][T11915] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 610.601383][T11918] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 610.601409][T11918] allowing incompatible features above 0.0: (unknown version) [ 610.601425][T11918] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 610.783302][T11918] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 610.793000][T11918] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: bad format 0, shutting down [ 610.793063][T11918] error not marked as autofix and not in fsck [ 610.793079][T11918] run fsck, and forward to devs so error can be marked for self-healing [ 610.793096][T11918] emergency read only at seq 0 [ 610.826548][T11918] bcachefs (loop3): error in recovery: fsck_errors_not_fixed [ 610.833964][T11918] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 610.843482][T11918] bcachefs (loop3): shutting down [ 610.890030][T11918] bcachefs (loop3): shutdown complete [ 611.058470][T11906] loop1: detected capacity change from 0 to 32768 [ 611.340709][T11915] ext4: Unknown parameter '+w͕9Q@BWA\jC7[a|M$4q"1?|'00+ffp[q ^|6CV?`M\~Cq>T kl2 [ 612.020374][T11954] dump_stack_lvl+0x189/0x250 [ 612.020417][T11954] ? __pfx____ratelimit+0x10/0x10 [ 612.020456][T11954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.020496][T11954] ? __pfx__printk+0x10/0x10 [ 612.020525][T11954] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.020567][T11954] should_fail_ex+0x414/0x560 [ 612.020605][T11954] prepare_alloc_pages+0x213/0x610 [ 612.020647][T11954] __alloc_frozen_pages_noprof+0x123/0x370 [ 612.020684][T11954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 612.020721][T11954] ? ima_match_policy+0x10b/0x2150 [ 612.020765][T11954] ? policy_nodemask+0x27c/0x720 [ 612.020787][T11954] ? __lock_acquire+0xab9/0xd20 [ 612.020834][T11954] alloc_pages_mpol+0x232/0x4a0 [ 612.020866][T11954] vma_alloc_folio_noprof+0xe4/0x200 [ 612.020897][T11954] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 612.020931][T11954] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.020966][T11954] folio_prealloc+0x30/0x180 [ 612.021000][T11954] __handle_mm_fault+0x2c88/0x5620 [ 612.021063][T11954] ? __pfx___handle_mm_fault+0x10/0x10 [ 612.021123][T11954] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.021151][T11954] ? find_vma+0xe7/0x160 [ 612.021173][T11954] ? __pfx_find_vma+0x10/0x10 [ 612.021202][T11954] handle_mm_fault+0x40a/0x8e0 [ 612.021254][T11954] do_user_addr_fault+0x764/0x1390 [ 612.021307][T11954] exc_page_fault+0x76/0xf0 [ 612.021348][T11954] asm_exc_page_fault+0x26/0x30 [ 612.021371][T11954] RIP: 0010:iov_iter_zero+0x53a/0x1690 [ 612.021408][T11954] Code: 93 c0 44 84 f8 74 30 e8 c4 c2 00 fd 48 c7 c7 b6 8a 9a 8d be b5 00 00 00 e8 d3 b6 4c fd 0f 01 cb 31 c0 48 8b 4c 24 08 4c 89 e7 aa 0f 1f 00 49 89 cc 0f 01 ca eb 0a e8 94 c2 00 fd 4c 8b 64 24 [ 612.021430][T11954] RSP: 0018:ffffc9000ab9f940 EFLAGS: 00050246 [ 612.021452][T11954] RAX: 0000000000000000 RBX: 00002000001fff6c RCX: 00000000001fef6c [ 612.021469][T11954] RDX: 0000000000000000 RSI: ffffffff8db6ecc6 RDI: 0000200000001000 [ 612.021487][T11954] RBP: ffffc9000ab9fa88 R08: 0000000000000000 R09: ffffffff820c5110 [ 612.021505][T11954] R10: 0000000000000005 R11: 0000000000000000 R12: 0000200000000000 [ 612.021521][T11954] R13: 00007ffffffff000 R14: 1ffff92001573f38 R15: ffffc9000ab9fc01 [ 612.021548][T11954] ? __might_fault+0xb0/0x130 [ 612.021599][T11954] ? __pfx_iov_iter_zero+0x10/0x10 [ 612.021635][T11954] ? aa_file_perm+0x11f/0xed0 [ 612.021674][T11954] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.021702][T11954] ? __filemap_get_folio+0x9a6/0xaf0 [ 612.021742][T11954] hugetlbfs_read_iter+0x3ca/0x7f0 [ 612.021797][T11954] do_iter_readv_writev+0x56e/0x7f0 [ 612.021828][T11954] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 612.021865][T11954] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.021893][T11954] ? rw_verify_area+0x258/0x650 [ 612.021936][T11954] vfs_readv+0x253/0x850 [ 612.021973][T11954] ? __pfx_vfs_readv+0x10/0x10 [ 612.022023][T11954] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.022055][T11954] ? __fget_files+0x2a/0x420 [ 612.022088][T11954] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.022116][T11954] ? __fget_files+0x3a0/0x420 [ 612.022143][T11954] ? __fget_files+0x2a/0x420 [ 612.022175][T11954] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.022209][T11954] __x64_sys_preadv+0x197/0x2a0 [ 612.022238][T11954] ? __pfx___x64_sys_preadv+0x10/0x10 [ 612.022262][T11954] ? rcu_is_watching+0x15/0xb0 [ 612.022308][T11954] ? do_syscall_64+0xbe/0x3b0 [ 612.022336][T11954] do_syscall_64+0xfa/0x3b0 [ 612.022357][T11954] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.022394][T11954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.022418][T11954] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.022446][T11954] ? exc_page_fault+0x9f/0xf0 [ 612.022485][T11954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.022509][T11954] RIP: 0033:0x7fb6a9b8e929 [ 612.022529][T11954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.022550][T11954] RSP: 002b:00007fb6aaa28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 612.022574][T11954] RAX: ffffffffffffffda RBX: 00007fb6a9db5fa0 RCX: 00007fb6a9b8e929 [ 612.022592][T11954] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 0000000000000003 [ 612.022608][T11954] RBP: 00007fb6aaa28090 R08: 0000000000000083 R09: 0000000000000000 [ 612.022625][T11954] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 612.022643][T11954] R13: 0000000000000000 R14: 00007fb6a9db5fa0 R15: 00007ffcc27f8f48 [ 612.022676][T11954] [ 612.489464][ T9714] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 612.498510][ T9714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.616164][ T9714] usb 7-1: config 0 descriptor?? [ 612.655488][ T9714] usb 7-1: can't set config #0, error -71 [ 612.708314][ T8003] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.747365][T11960] FAULT_INJECTION: forcing a failure. [ 612.747365][T11960] name failslab, interval 1, probability 0, space 0, times 0 [ 612.760650][T11960] CPU: 1 UID: 0 PID: 11960 Comm: syz.8.1414 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 612.760678][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 612.760693][T11960] Call Trace: [ 612.760702][T11960] [ 612.760712][T11960] dump_stack_lvl+0x189/0x250 [ 612.760753][T11960] ? __pfx____ratelimit+0x10/0x10 [ 612.760788][T11960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.760825][T11960] ? __pfx__printk+0x10/0x10 [ 612.760859][T11960] ? __pfx___might_resched+0x10/0x10 [ 612.760906][T11960] should_fail_ex+0x414/0x560 [ 612.760946][T11960] should_failslab+0xa8/0x100 [ 612.760976][T11960] __kmalloc_cache_noprof+0x70/0x3d0 [ 612.761000][T11960] ? assoc_array_delete+0xc1/0xf90 [ 612.761034][T11960] assoc_array_delete+0xc1/0xf90 [ 612.761060][T11960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.761097][T11960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.761135][T11960] ? __pfx_assoc_array_delete+0x10/0x10 [ 612.761160][T11960] ? down_write_nested+0x169/0x200 [ 612.761188][T11960] ? __pfx_down_write_nested+0x10/0x10 [ 612.761229][T11960] key_move+0x1e8/0x780 [ 612.761277][T11960] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 612.761315][T11960] ? __pfx_key_move+0x10/0x10 [ 612.761353][T11960] ? vfs_write+0x8d8/0xa90 [ 612.761389][T11960] keyctl_keyring_move+0xd6/0x110 [ 612.761419][T11960] __se_sys_keyctl+0x6ec/0x910 [ 612.761452][T11960] ? __pfx___se_sys_keyctl+0x10/0x10 [ 612.761486][T11960] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 612.761516][T11960] ? __fget_files+0x3a0/0x420 [ 612.761553][T11960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.761581][T11960] ? fput+0xa0/0xd0 [ 612.761612][T11960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.761641][T11960] ? ksys_write+0x22a/0x250 [ 612.761660][T11960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.761693][T11960] ? __pfx_ksys_write+0x10/0x10 [ 612.761723][T11960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.761752][T11960] ? __x64_sys_keyctl+0x20/0xc0 [ 612.761783][T11960] do_syscall_64+0xfa/0x3b0 [ 612.761806][T11960] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.761843][T11960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.761867][T11960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.761895][T11960] ? exc_page_fault+0x9f/0xf0 [ 612.761934][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.761958][T11960] RIP: 0033:0x7fb6a9b8e929 [ 612.761978][T11960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.761999][T11960] RSP: 002b:00007fb6aaa28038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 612.762025][T11960] RAX: ffffffffffffffda RBX: 00007fb6a9db5fa0 RCX: 00007fb6a9b8e929 [ 612.762043][T11960] RDX: 0000000016e9e515 RSI: 0000000013ead02a RDI: 000000000000001e [ 612.762060][T11960] RBP: 00007fb6aaa28090 R08: 0000000000000000 R09: 0000000000000000 [ 612.762076][T11960] R10: 00000000224bd6cf R11: 0000000000000246 R12: 0000000000000001 [ 612.762091][T11960] R13: 0000000000000000 R14: 00007fb6a9db5fa0 R15: 00007ffcc27f8f48 [ 612.762129][T11960] [ 612.774837][ T9714] usb 7-1: USB disconnect, device number 14 [ 614.899192][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 615.182237][T11918] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 615.289327][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 615.347051][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 615.388786][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.421011][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 615.438836][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.473036][ T24] usb 7-1: Product: syz [ 615.484315][ T24] usb 7-1: Manufacturer: syz [ 615.505402][ T24] usb 7-1: SerialNumber: syz [ 615.529183][ T24] usb 7-1: config 0 descriptor?? [ 615.560499][ T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 615.608253][ T24] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 616.544842][ T24] em28xx 7-1:0.0: unknown em28xx chip ID (47) [ 617.849437][ T24] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 619.967088][ T24] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 620.106264][ T24] em28xx 7-1:0.0: No AC97 audio processor [ 620.466200][ T24] usb 7-1: USB disconnect, device number 15 [ 620.725765][ T24] em28xx 7-1:0.0: Disconnecting em28xx [ 620.863844][ T24] em28xx 7-1:0.0: Freeing device [ 621.420796][T12018] loop3: detected capacity change from 0 to 4096 [ 623.194198][T12020] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 623.498352][ T30] audit: type=1800 audit(1750051967.054:687): pid=12018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1428" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 623.742448][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.750792][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.255586][T12043] FAULT_INJECTION: forcing a failure. [ 627.255586][T12043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.283913][T12060] loop1: detected capacity change from 0 to 512 [ 627.318444][T12043] CPU: 1 UID: 0 PID: 12043 Comm: syz.3.1434 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 627.318475][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.318490][T12043] Call Trace: [ 627.318500][T12043] [ 627.318510][T12043] dump_stack_lvl+0x189/0x250 [ 627.318554][T12043] ? __pfx____ratelimit+0x10/0x10 [ 627.318592][T12043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.318632][T12043] ? __pfx__printk+0x10/0x10 [ 627.318659][T12043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.318709][T12043] should_fail_ex+0x414/0x560 [ 627.318761][T12043] _copy_from_user+0x2d/0xb0 [ 627.318789][T12043] ___sys_sendmsg+0x158/0x2a0 [ 627.318825][T12043] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.318867][T12043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.318932][T12043] ? __fget_files+0x2a/0x420 [ 627.318959][T12043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.318988][T12043] ? __fget_files+0x3a0/0x420 [ 627.319028][T12043] __x64_sys_sendmsg+0x19b/0x260 [ 627.319065][T12043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.319109][T12043] ? __pfx_ksys_write+0x10/0x10 [ 627.319130][T12043] ? rcu_is_watching+0x15/0xb0 [ 627.319176][T12043] ? do_syscall_64+0xbe/0x3b0 [ 627.319214][T12043] do_syscall_64+0xfa/0x3b0 [ 627.319235][T12043] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.319272][T12043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.319295][T12043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.319324][T12043] ? exc_page_fault+0x9f/0xf0 [ 627.319363][T12043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.319387][T12043] RIP: 0033:0x7f9b19f8e929 [ 627.319407][T12043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.319427][T12043] RSP: 002b:00007f9b17df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.319452][T12043] RAX: ffffffffffffffda RBX: 00007f9b1a1b5fa0 RCX: 00007f9b19f8e929 [ 627.319472][T12043] RDX: 0000000000044044 RSI: 00002000000004c0 RDI: 0000000000000004 [ 627.319488][T12043] RBP: 00007f9b17df6090 R08: 0000000000000000 R09: 0000000000000000 [ 627.319505][T12043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.319520][T12043] R13: 0000000000000000 R14: 00007f9b1a1b5fa0 R15: 00007ffccd2ecfb8 [ 627.319557][T12043] [ 627.711278][T12060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.727433][T12070] loop8: detected capacity change from 0 to 512 [ 627.818842][T12060] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.918844][ T3077] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 628.138462][ T5199] udevd[5199]: worker [8930] terminated by signal 33 (Unknown signal 33) [ 628.147618][ T3077] usb 7-1: Using ep0 maxpacket: 16 [ 628.167524][T12070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.210506][T12070] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.237392][ T3077] usb 7-1: config 0 interface 0 has no altsetting 0 [ 628.274645][T12083] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz.1.1440: invalid size [ 628.289321][ T5199] udevd[5199]: worker [8930] failed while handling '/devices/virtual/block/loop1' [ 628.344135][T12083] EXT4-fs (loop1): Remounting filesystem read-only [ 628.499348][ T3077] usb 7-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=48.e3 [ 628.590624][ T3077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.799076][ T5199] udevd[5199]: worker [9762] terminated by signal 33 (Unknown signal 33) [ 628.889124][ T3077] usb 7-1: Product: syz [ 628.893308][ T3077] usb 7-1: Manufacturer: syz [ 628.939331][ T1091] Bluetooth: hci6: Frame reassembly failed (-84) [ 628.951724][T12080] loop3: detected capacity change from 0 to 64 [ 629.000911][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.038205][ T1036] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 629.059200][ T3077] usb 7-1: SerialNumber: syz [ 629.192397][ T3077] usb 7-1: config 0 descriptor?? [ 629.216569][T12085] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz.8.1441: invalid size [ 629.229316][T12085] EXT4-fs (loop8): Remounting filesystem read-only [ 629.246292][ T1036] Quota error (device loop1): write_blk: dquota write failed [ 629.361969][ T1036] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 629.455943][ T1036] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 629.546481][ T5199] udevd[5199]: worker [9762] failed while handling '/devices/virtual/block/loop8' [ 629.831288][ T1036] Quota error (device loop1): write_blk: dquota write failed [ 629.842194][T10245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.878798][ T1036] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 630.540756][ T1036] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 630.601060][ T1036] Quota error (device loop8): write_blk: dquota write failed [ 630.608549][ T1036] Quota error (device loop8): free_dqentry: Can't write quota data block 5 [ 630.638136][ T1036] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 630.709202][ T1036] Quota error (device loop8): write_blk: dquota write failed [ 630.745952][ T1036] Quota error (device loop8): free_dqentry: Can't write quota data block 5 [ 631.029303][T12104] loop1: detected capacity change from 0 to 32768 [ 631.035983][ T5841] Bluetooth: hci6: command 0x1003 tx timeout [ 631.043004][ T5839] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 631.317739][T12104] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 631.317764][T12104] allowing incompatible features above 0.0: (unknown version) [ 631.317776][T12104] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 631.362529][T12104] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 631.370790][T12104] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 631.493862][T12104] bcachefs (loop1): accounting_read... done [ 631.509281][T12104] bcachefs (loop1): alloc_read... done [ 631.515149][T12104] bcachefs (loop1): snapshots_read... done [ 631.536615][T12104] bcachefs (loop1): journal_replay... done [ 631.546535][T12104] bcachefs (loop1): resume_logged_ops... done [ 631.556633][T12104] bcachefs (loop1): delete_dead_inodes... done [ 631.567024][T12104] bcachefs (loop1): done starting filesystem [ 632.420353][ T3077] usb 7-1: USB disconnect, device number 16 [ 632.633111][ T5832] bcachefs (loop1): shutting down [ 633.378192][ T5832] bcachefs (loop1): shutdown complete [ 633.408125][T12121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 633.848999][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1449'. [ 635.498923][ T5988] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 635.669075][ T5988] usb 9-1: Using ep0 maxpacket: 32 [ 635.682013][ T5988] usb 9-1: config 0 has an invalid interface number: 247 but max is 0 [ 635.699071][ T5988] usb 9-1: config 0 has no interface number 0 [ 635.716905][ T5988] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 635.762264][ T5988] usb 9-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 635.821128][ T5988] usb 9-1: Manufacturer: syz [ 635.857669][ T5988] usb 9-1: config 0 descriptor?? [ 635.973961][T12129] loop6: detected capacity change from 0 to 32768 [ 636.082408][ T5988] usb 9-1: USB disconnect, device number 8 [ 636.437525][T12129] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 636.437558][T12129] allowing incompatible features above 0.0: (unknown version) [ 636.437574][T12129] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 636.679027][T12129] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 636.687294][T12129] bcachefs (loop6): recovering from clean shutdown, journal seq 13 [ 636.698889][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 636.869370][T12129] bcachefs (loop6): accounting_read... done [ 636.903469][T12129] bcachefs (loop6): alloc_read... done [ 636.926354][T12129] bcachefs (loop6): snapshots_read... done [ 636.952293][T12129] bcachefs (loop6): journal_replay... done [ 636.989215][T12129] bcachefs (loop6): resume_logged_ops... done [ 636.995693][T12129] bcachefs (loop6): delete_dead_inodes... done [ 637.034830][T12129] bcachefs (loop6): done starting filesystem [ 637.149314][ T1206] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 637.183617][ T8003] bcachefs (loop6): shutting down [ 637.269190][ T9714] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 637.281963][ T8003] bcachefs (loop6): shutdown complete [ 637.309602][ T1206] usb 9-1: Using ep0 maxpacket: 8 [ 637.325609][ T1206] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 637.349345][ T1206] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 637.377917][ T1206] usb 9-1: Product: syz [ 637.418819][ T1206] usb 9-1: Manufacturer: syz [ 637.433799][ T1206] usb 9-1: SerialNumber: syz [ 637.450674][ T9714] usb 2-1: Using ep0 maxpacket: 32 [ 637.456967][ T1206] usb 9-1: config 0 descriptor?? [ 637.478140][ T9714] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 637.495337][ T1206] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 637.502130][ T9714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.543358][ T9714] usb 2-1: config 0 descriptor?? [ 637.581147][ T9714] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 637.669322][ T9714] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 637.755051][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.928435][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.045915][T12151] loop8: detected capacity change from 0 to 512 [ 638.330568][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.373081][T12151] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 638.489092][ T1206] gspca_zc3xx: reg_w_i err -110 [ 638.494034][ T1206] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 638.511827][T12151] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 638.533455][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.549459][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.555691][T12151] EXT4-fs (loop8): orphan cleanup on readonly fs [ 638.559937][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.573079][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.582744][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.591934][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.602335][T12151] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1461: invalid indirect mapped block 2185560079 (level 1) [ 638.602465][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.630475][T12151] EXT4-fs (loop8): Remounting filesystem read-only [ 638.638367][T12151] EXT4-fs (loop8): 1 truncate cleaned up [ 638.646402][T12151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 638.682203][ T1206] usb 2-1: USB disconnect, device number 22 [ 638.711304][T12151] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.1461: dx entry: limit 0 != root limit 125 [ 638.761521][T12151] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1461: Corrupt directory, running e2fsck is recommended [ 641.047063][ T3077] usb 9-1: USB disconnect, device number 9 [ 641.165306][T10245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 641.402541][T12192] loop8: detected capacity change from 0 to 1024 [ 641.739834][T12199] loop7: detected capacity change from 0 to 4096 [ 642.092811][T12202] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 643.241557][T12192] bridge1: entered promiscuous mode [ 644.897154][ T6131] hfsplus: b-tree write err: -5, ino 4 [ 645.866752][T12216] x_tables: duplicate underflow at hook 2 [ 645.943135][ T3077] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 646.118848][ T3077] usb 9-1: Using ep0 maxpacket: 8 [ 646.160850][ T3077] usb 9-1: unable to get BOS descriptor or descriptor too short [ 646.207151][ T3077] usb 9-1: config 9 has an invalid interface number: 5 but max is 0 [ 646.245913][ T3077] usb 9-1: config 9 has no interface number 0 [ 646.252497][T12225] loop1: detected capacity change from 0 to 1024 [ 646.268648][ T3077] usb 9-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 646.340355][ T3077] usb 9-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 646.387432][ T3077] usb 9-1: config 9 interface 5 has no altsetting 0 [ 646.436340][T12232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.609350][ T3077] usb 9-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 646.622493][ T3077] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.660772][ T3077] usb 9-1: Product: syz [ 647.431823][ T3077] usb 9-1: Manufacturer: syz [ 647.462375][ T3077] usb 9-1: SerialNumber: syz [ 647.559174][ T1206] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 647.743595][ T3077] usb 9-1: USB disconnect, device number 10 [ 647.759186][ T1206] usb 7-1: Using ep0 maxpacket: 16 [ 647.782693][ T1206] usb 7-1: config 0 interface 0 has no altsetting 0 [ 647.810328][T12241] FAULT_INJECTION: forcing a failure. [ 647.810328][T12241] name failslab, interval 1, probability 0, space 0, times 0 [ 647.812528][ T1206] usb 7-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=48.e3 [ 647.881576][T12241] CPU: 1 UID: 0 PID: 12241 Comm: syz.1.1485 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 647.881608][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.881624][T12241] Call Trace: [ 647.881633][T12241] [ 647.881644][T12241] dump_stack_lvl+0x189/0x250 [ 647.881687][T12241] ? __pfx____ratelimit+0x10/0x10 [ 647.881726][T12241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.881766][T12241] ? __pfx__printk+0x10/0x10 [ 647.881800][T12241] ? __pfx___might_resched+0x10/0x10 [ 647.881838][T12241] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.881879][T12241] should_fail_ex+0x414/0x560 [ 647.881917][T12241] should_failslab+0xa8/0x100 [ 647.881946][T12241] __kmalloc_noprof+0xcb/0x4f0 [ 647.881969][T12241] ? kfree+0x4d/0x440 [ 647.882003][T12241] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 647.882046][T12241] tomoyo_realpath_from_path+0xe3/0x5d0 [ 647.882085][T12241] ? tomoyo_domain+0xd9/0x130 [ 647.882128][T12241] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 647.882158][T12241] tomoyo_path_number_perm+0x1e8/0x5a0 [ 647.882192][T12241] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 647.882230][T12241] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.882272][T12241] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.882301][T12241] ? __lock_acquire+0xab9/0xd20 [ 647.882360][T12241] ? __fget_files+0x2a/0x420 [ 647.882391][T12241] ? __fget_files+0x2a/0x420 [ 647.882417][T12241] ? __fget_files+0x3a0/0x420 [ 647.882443][T12241] ? __fget_files+0x2a/0x420 [ 647.882476][T12241] security_file_ioctl+0xcb/0x2d0 [ 647.882506][T12241] __se_sys_ioctl+0x47/0x170 [ 647.882546][T12241] do_syscall_64+0xfa/0x3b0 [ 647.882567][T12241] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.882604][T12241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.882627][T12241] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.882654][T12241] ? exc_page_fault+0x9f/0xf0 [ 647.882692][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.882716][T12241] RIP: 0033:0x7fadebb8e929 [ 647.882736][T12241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.882756][T12241] RSP: 002b:00007fadeca7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.882781][T12241] RAX: ffffffffffffffda RBX: 00007fadebdb5fa0 RCX: 00007fadebb8e929 [ 647.882800][T12241] RDX: 0000200000000000 RSI: 00000000c0045009 RDI: 0000000000000003 [ 647.882818][T12241] RBP: 00007fadeca7a090 R08: 0000000000000000 R09: 0000000000000000 [ 647.882834][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.882849][T12241] R13: 0000000000000000 R14: 00007fadebdb5fa0 R15: 00007fffaee05fc8 [ 647.882894][T12241] [ 647.882948][T12241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 647.902572][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.047917][T12243] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1486'. [ 648.179941][T12243] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1486'. [ 648.314087][ T1206] usb 7-1: Product: syz [ 648.318282][ T1206] usb 7-1: Manufacturer: syz [ 648.332650][ T1206] usb 7-1: SerialNumber: syz [ 648.340552][ T1206] usb 7-1: config 0 descriptor?? [ 648.643750][T12253] FAULT_INJECTION: forcing a failure. [ 648.643750][T12253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.688751][T12253] CPU: 0 UID: 0 PID: 12253 Comm: syz.8.1489 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 648.688789][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.688805][T12253] Call Trace: [ 648.688815][T12253] [ 648.688826][T12253] dump_stack_lvl+0x189/0x250 [ 648.688869][T12253] ? __pfx____ratelimit+0x10/0x10 [ 648.688914][T12253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.688953][T12253] ? __pfx__printk+0x10/0x10 [ 648.688983][T12253] ? __might_fault+0xb0/0x130 [ 648.689012][T12253] ? lock_release+0x2b5/0x3e0 [ 648.689052][T12253] should_fail_ex+0x414/0x560 [ 648.689090][T12253] _copy_from_user+0x2d/0xb0 [ 648.689110][T12253] do_ip_vs_set_ctl+0x2d3/0xa60 [ 648.689144][T12253] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 648.689168][T12253] ? rcu_is_watching+0x15/0xb0 [ 648.689202][T12253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.689232][T12253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.689253][T12253] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 648.689276][T12253] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 648.689293][T12253] ? smc_setsockopt+0x181/0xab0 [ 648.689322][T12253] ? __pfx___mutex_lock+0x10/0x10 [ 648.689338][T12253] ? rcu_read_lock_any_held+0xb3/0x120 [ 648.689356][T12253] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 648.689377][T12253] ? vfs_write+0x8d8/0xa90 [ 648.689397][T12253] nf_setsockopt+0x26f/0x290 [ 648.689423][T12253] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 648.689446][T12253] smc_setsockopt+0x232/0xab0 [ 648.689478][T12253] ? __pfx_smc_setsockopt+0x10/0x10 [ 648.689505][T12253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.689529][T12253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.689549][T12253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.689570][T12253] ? __pfx_smc_setsockopt+0x10/0x10 [ 648.689598][T12253] do_sock_setsockopt+0x25a/0x3e0 [ 648.689624][T12253] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 648.689649][T12253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.689671][T12253] ? __fget_files+0x2a/0x420 [ 648.689699][T12253] __x64_sys_setsockopt+0x18b/0x220 [ 648.689728][T12253] do_syscall_64+0xfa/0x3b0 [ 648.689746][T12253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.689764][T12253] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 648.689788][T12253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.689806][T12253] RIP: 0033:0x7fb6a9b8e929 [ 648.689822][T12253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.689837][T12253] RSP: 002b:00007fb6aaa28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 648.689856][T12253] RAX: ffffffffffffffda RBX: 00007fb6a9db5fa0 RCX: 00007fb6a9b8e929 [ 648.689876][T12253] RDX: 0000000000000483 RSI: 0000000000000000 RDI: 0000000000000004 [ 648.689887][T12253] RBP: 00007fb6aaa28090 R08: 000000000000002c R09: 0000000000000000 [ 648.689900][T12253] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.689912][T12253] R13: 0000000000000000 R14: 00007fb6a9db5fa0 R15: 00007ffcc27f8f48 [ 648.689940][T12253] [ 650.254396][T12261] loop8: detected capacity change from 0 to 512 [ 650.369536][T12261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.426908][T12263] loop1: detected capacity change from 0 to 1024 [ 650.512568][T12261] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.546628][T12263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.606177][T12263] overlayfs: missing 'lowerdir' [ 650.636588][T12263] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.1491: Abort forced by user [ 650.682122][T12263] EXT4-fs (loop1): Remounting filesystem read-only [ 650.722668][T12263] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 651.617020][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.645039][T10245] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.781598][ T1206] usb 7-1: USB disconnect, device number 17 [ 651.938372][T12277] loop7: detected capacity change from 0 to 8192 [ 653.548772][ T1206] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 653.860931][ T1206] usb 7-1: Using ep0 maxpacket: 32 [ 653.939200][ T1206] usb 7-1: unable to get BOS descriptor or descriptor too short [ 653.970691][ T1206] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 653.977920][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1499'. [ 654.008804][ T1206] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 654.330447][ T1206] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 654.392317][T12297] FAULT_INJECTION: forcing a failure. [ 654.392317][T12297] name failslab, interval 1, probability 0, space 0, times 0 [ 654.603028][T12297] CPU: 0 UID: 0 PID: 12297 Comm: syz.1.1501 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 654.603061][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.603077][T12297] Call Trace: [ 654.603087][T12297] [ 654.603097][T12297] dump_stack_lvl+0x189/0x250 [ 654.603141][T12297] ? __pfx____ratelimit+0x10/0x10 [ 654.603179][T12297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.603218][T12297] ? __pfx__printk+0x10/0x10 [ 654.603252][T12297] ? __pfx___might_resched+0x10/0x10 [ 654.603300][T12297] should_fail_ex+0x414/0x560 [ 654.603338][T12297] should_failslab+0xa8/0x100 [ 654.603367][T12297] __kmalloc_noprof+0xcb/0x4f0 [ 654.603390][T12297] ? kfree+0x4d/0x440 [ 654.603428][T12297] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 654.603472][T12297] tomoyo_realpath_from_path+0xe3/0x5d0 [ 654.603511][T12297] ? tomoyo_domain+0xd9/0x130 [ 654.603556][T12297] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 654.603586][T12297] tomoyo_path_number_perm+0x1e8/0x5a0 [ 654.603619][T12297] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 654.603650][T12297] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 654.603683][T12297] ? preempt_schedule_irq+0xde/0x150 [ 654.603720][T12297] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 654.603769][T12297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.603798][T12297] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 654.603828][T12297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.603889][T12297] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.603917][T12297] ? __rcu_read_unlock+0x84/0xe0 [ 654.603948][T12297] ? __fget_files+0x2a/0x420 [ 654.603974][T12297] ? __fget_files+0x3a0/0x420 [ 654.604000][T12297] ? __fget_files+0x2a/0x420 [ 654.604033][T12297] security_file_ioctl+0xcb/0x2d0 [ 654.604064][T12297] __se_sys_ioctl+0x47/0x170 [ 654.604104][T12297] do_syscall_64+0xfa/0x3b0 [ 654.604130][T12297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.604153][T12297] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 654.604184][T12297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.604208][T12297] RIP: 0033:0x7fadebb8e929 [ 654.604229][T12297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.604250][T12297] RSP: 002b:00007fadeca7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.604275][T12297] RAX: ffffffffffffffda RBX: 00007fadebdb5fa0 RCX: 00007fadebb8e929 [ 654.604294][T12297] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 654.604312][T12297] RBP: 00007fadeca7a090 R08: 0000000000000000 R09: 0000000000000000 [ 654.604329][T12297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.604344][T12297] R13: 0000000000000000 R14: 00007fadebdb5fa0 R15: 00007fffaee05fc8 [ 654.604382][T12297] [ 654.605632][T12297] ERROR: Out of memory at tomoyo_realpath_from_path. [ 654.891305][ T1206] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 655.117893][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 655.126423][ T1206] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.135541][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.148112][ T1206] usb 7-1: Product: syz [ 655.153141][T12296] loop8: detected capacity change from 0 to 2048 [ 655.215379][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1500'. [ 655.523576][ T1206] usb 7-1: can't set config #1, error -71 [ 655.533048][ T1206] usb 7-1: USB disconnect, device number 18 [ 655.612623][T12296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.724844][T12310] loop1: detected capacity change from 0 to 16 [ 655.732928][T12310] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 655.761417][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1499'. [ 655.800153][T12292] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 656.248833][ T30] audit: type=1326 audit(1750051999.854:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 656.636868][ T30] audit: type=1326 audit(1750051999.854:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 656.671711][T12292] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2 with error 28 [ 656.718917][T12292] EXT4-fs (loop8): This should not happen!! Data will be lost [ 656.718917][T12292] [ 656.846493][ T30] audit: type=1326 audit(1750051999.854:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 656.888810][T12292] EXT4-fs (loop8): Total free blocks count 0 [ 656.893512][ T30] audit: type=1326 audit(1750051999.854:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 656.933301][T12292] EXT4-fs (loop8): Free/Dirty block details [ 656.933686][ T30] audit: type=1326 audit(1750051999.854:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 656.964818][ T30] audit: type=1326 audit(1750051999.854:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 656.987921][ T30] audit: type=1326 audit(1750051999.854:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 657.011226][T12292] EXT4-fs (loop8): free_blocks=2415919104 [ 657.016988][T12292] EXT4-fs (loop8): dirty_blocks=32 [ 657.022804][T12292] EXT4-fs (loop8): Block reservation details [ 657.029029][T12292] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 657.036132][ T30] audit: type=1326 audit(1750051999.864:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 657.254024][ T30] audit: type=1326 audit(1750051999.864:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 657.282018][ T30] audit: type=1326 audit(1750051999.864:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebb8e929 code=0x7ffc0000 [ 657.377682][ T36] ------------[ cut here ]------------ [ 657.383323][ T36] kernel BUG at fs/ext4/inode.c:2748! [ 657.429378][ T36] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 657.435814][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 657.447794][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 657.457849][ T36] Workqueue: writeback wb_workfn (flush-7:8) [ 657.463863][ T36] RIP: 0010:ext4_do_writepages+0x3f2b/0x3f30 [ 657.469853][ T36] Code: c1 0f 8c 2a fd ff ff 4c 89 e7 e8 40 56 b0 ff e9 1d fd ff ff e8 46 d8 4c ff 90 0f 0b e8 3e d8 4c ff 90 0f 0b e8 36 d8 4c ff 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 [ 657.489452][ T36] RSP: 0018:ffffc90000ac6ce0 EFLAGS: 00010293 [ 657.495511][ T36] RAX: ffffffff8273840a RBX: 0000004210000000 RCX: ffff8881436b9e00 [ 657.503473][ T36] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 657.511434][ T36] RBP: ffffc90000ac70f0 R08: ffff88805451b9b7 R09: 1ffff1100a8a3736 [ 657.519401][ T36] R10: dffffc0000000000 R11: ffffed100a8a3737 R12: 0000000000000001 [ 657.527363][ T36] R13: 0000000004208060 R14: 0000004000000000 R15: ffffc90000ac7140 [ 657.535325][ T36] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 657.544246][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.550819][ T36] CR2: 0000000000000008 CR3: 000000005f6a0000 CR4: 0000000000350ef0 [ 657.558785][ T36] Call Trace: [ 657.562052][ T36] [ 657.564978][ T36] ? preempt_schedule_irq+0xb5/0x150 [ 657.570271][ T36] ? __pfx___schedule+0x10/0x10 [ 657.575123][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.580753][ T36] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 657.586220][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.591851][ T36] ? rcu_is_watching+0x15/0xb0 [ 657.596619][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.602244][ T36] ? trace_irq_disable+0x37/0x110 [ 657.607265][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.612891][ T36] ? preempt_schedule_irq+0xde/0x150 [ 657.618175][ T36] ? __pfx_ext4_do_writepages+0x10/0x10 [ 657.623720][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.629347][ T36] ? rcu_is_watching+0x15/0xb0 [ 657.634122][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.639747][ T36] ? __lock_acquire+0xab9/0xd20 [ 657.644603][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.650233][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.655861][ T36] ? rcu_read_lock_any_held+0xb3/0x120 [ 657.661314][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.666946][ T36] ext4_writepages+0x205/0x350 [ 657.671708][ T36] ? __pfx_ext4_writepages+0x10/0x10 [ 657.676991][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.682618][ T36] ? deref_stack_reg+0x19f/0x230 [ 657.687563][ T36] ? __pfx_ext4_writepages+0x10/0x10 [ 657.692842][ T36] do_writepages+0x32e/0x550 [ 657.697438][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.703065][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 657.708431][ T36] ? writeback_sb_inodes+0x372/0x1000 [ 657.713814][ T36] __writeback_single_inode+0x145/0xff0 [ 657.719364][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.724992][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 657.730190][ T36] writeback_sb_inodes+0x6b5/0x1000 [ 657.735401][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.741036][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 657.746694][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.752322][ T36] ? rcu_is_watching+0x15/0xb0 [ 657.757098][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.762730][ T36] wb_writeback+0x43b/0xaf0 [ 657.767242][ T36] ? queue_io+0x351/0x590 [ 657.771578][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 657.776609][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.781812][ T36] wb_workfn+0x409/0xef0 [ 657.786058][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 657.790829][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.796458][ T36] ? __lock_acquire+0xab9/0xd20 [ 657.801313][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.806942][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.812571][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.817768][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 657.823489][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 657.829212][ T36] process_scheduled_works+0xae1/0x17b0 [ 657.834774][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 657.840763][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.846393][ T36] worker_thread+0x8a0/0xda0 [ 657.850989][ T36] kthread+0x711/0x8a0 [ 657.855056][ T36] ? __pfx_worker_thread+0x10/0x10 [ 657.860175][ T36] ? __pfx_kthread+0x10/0x10 [ 657.864759][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.870391][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.875590][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.881216][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.886414][ T36] ? __pfx_kthread+0x10/0x10 [ 657.891000][ T36] ret_from_fork+0x3fc/0x770 [ 657.895591][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 657.900707][ T36] ? __switch_to_asm+0x39/0x70 [ 657.905462][ T36] ? __switch_to_asm+0x33/0x70 [ 657.910217][ T36] ? __pfx_kthread+0x10/0x10 [ 657.914803][ T36] ret_from_fork_asm+0x1a/0x30 [ 657.919570][ T36] [ 657.922576][ T36] Modules linked in: [ 657.927392][ T36] ---[ end trace 0000000000000000 ]--- [ 657.939741][T12327] loop7: detected capacity change from 0 to 64 [ 658.059858][ T36] RIP: 0010:ext4_do_writepages+0x3f2b/0x3f30 [ 658.065884][ T36] Code: c1 0f 8c 2a fd ff ff 4c 89 e7 e8 40 56 b0 ff e9 1d fd ff ff e8 46 d8 4c ff 90 0f 0b e8 3e d8 4c ff 90 0f 0b e8 36 d8 4c ff 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 [ 658.093456][ T36] RSP: 0018:ffffc90000ac6ce0 EFLAGS: 00010293 [ 658.099580][ T36] RAX: ffffffff8273840a RBX: 0000004210000000 RCX: ffff8881436b9e00 [ 658.107725][ T36] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 658.121446][ T5835] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 658.130371][ T36] RBP: ffffc90000ac70f0 R08: ffff88805451b9b7 R09: 1ffff1100a8a3736 [ 658.164645][ T36] R10: dffffc0000000000 R11: ffffed100a8a3737 R12: 0000000000000001 [ 658.175440][T12331] hfs: keylen 1794 too large [ 658.178233][ T36] R13: 0000000004208060 R14: 0000004000000000 R15: ffffc90000ac7140 [ 658.189506][ T36] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 658.191622][T12331] hfs: keylen 1794 too large [ 658.198478][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.207086][T12327] hfs: keylen 1794 too large [ 658.211400][ T36] CR2: 00007f7c6ad30e9c CR3: 0000000077172000 CR4: 0000000000350ef0 [ 658.222924][ T36] Kernel panic - not syncing: Fatal exception [ 658.229189][ T36] Kernel Offset: disabled [ 658.233503][ T36] Rebooting in 86400 seconds..